PFconf offers a set of scripts to simplify using basic packet filters, enabling easier network security management.
If you're looking for an easy way to work with naked packet filters, then you should check out PFconf. This script collection simplifies the process and allows for the easier handling of ACLs. Usually, packet filters don't accommodate group objects, which means you have to create multiple rules for specific tables of IP addresses and networks. However, OpenBSD's "PF" overcomes this issue.
With PFconf, you only need a single rule no matter how many mail servers and protocols you have. The script automatically takes care of necessary permutations, so you don't have to worry about forgetting any rules. These scripts are designed to be fairly simple, with plenty of space for comments explaining rule orders and preferences.
Additionally, PFconf is small, efficient, portable, and easy to use. Plus, with the promise of NAT handling and management scripts coming soon, you'll have even more features at your disposal. Target conversion for Cisco ACLs and OpenBSD's PF will probably follow shortly after. Overall, if you're looking to simplify your packet filter management, PFconf is worth checking out.
With PFconf, you only need a single rule no matter how many mail servers and protocols you have. The script automatically takes care of necessary permutations, so you don't have to worry about forgetting any rules. These scripts are designed to be fairly simple, with plenty of space for comments explaining rule orders and preferences.
Additionally, PFconf is small, efficient, portable, and easy to use. Plus, with the promise of NAT handling and management scripts coming soon, you'll have even more features at your disposal. Target conversion for Cisco ACLs and OpenBSD's PF will probably follow shortly after. Overall, if you're looking to simplify your packet filter management, PFconf is worth checking out.
What's New
Version 0.8.1: N/A