Because of this, Firewall Builder can be used to manage firewalls built on variety of platforms including, but not limited to, Linux running iptables and FreeBSD or Solaris running ipfilter. Neither GUI nor compiler tries to install policy, because it is done in different ways on different firewall implementations. We encourage other developers to develop compilers for different firewall platforms. Implementation of compilers included in the package, although usable, is mostly intended as a demonstration of our technology and as an example of how policy compiler for Firewall Builder could be done. We are hoping to see other developers implement their own versions of policy compilers and will support such efforts if GUI needs to be adjusted to support new features.
Simple framework is provided to help compiler development.
It compiles and works on RedHat 6.2 and RedHat 7.0. Policy compiler is written in plain C for simplicity and needs only libxml. Basically, to start, one should create objects for the firewall and internal network and then call this druid. It will ask few quesitons and then build basic skeleton policy, which can be edited manually.