/mini-firewall

A simple firewall service provided by kernel module

Primary LanguageC

Overview

The package is a mini firewall which is rebuilt according this artical

It is a practice for me to

  • learn how to write a linux kernel module
  • learn how to bridge user space and kernel space
  • enhance my network perspectives

The mini firewall can BLOCK or LOG packets according to a set of rules.The rules are set by a user space configuraiton utility program. User can specify three conditions of ip to BLOCK and LOG:

  • ip with specific port
  • specific ip
  • all of ip in same net id

Environment

Linux kernel for version 4.4.0 .

Build and run

cd miniFirewall
make
cd module
make
sudo insmod mf_km.ko
cd ..
sudo ./mf --out -t 31.13.87.36 -a BLOCK

close the mini firewall

sudo rmmod mf_km