Last updated 2003-04-24

An example configuration for a netfilter based firewall system is available
as the target .firewall (TYPE_SYSTEM=.firewall) in compilescripts directory.

An excellent tutorial on configuring netfilter (both kernel configuration and
script initialization) is available at the following URL:
	http://iptables-tutorial.frozentux.net/iptables-tutorial.html

The initial netfilter script used in the .firewall BRECIS configuration was
generated by the Easy Firewall Generator for IPTables version 1.13. This is
available at the following URL:
	http://morizot.net/firewall/

This site makes both an online generator and the source of the generator
available. Please note that example file has been changed, with each change
comments, as follows:

  0) removed /bin/sh to work in ash, allows direct lookup of eth IP addresses
  1) uncommented SYSCTL setting to echo values directly to /proc files
  2) added funky direct lookup of eth<x> IP addresses
  2) removed all module checks (embedded system!)
  3) removed references to mangling (not used)
  4) added rule for Smartbits testing of UDP stream, port 64 
     (comment this out for field use)
