----------------------------------------------------------------------- FWdoc - FireWall ruleset DOCumentation 2006-2010 by Volker Tanger ----------------------------------------------------------------------- FWdoc is a vendor-independent standard of storing firewall ruleset configurations. We provide tools to extract the ruleset from proprietary formats into FWdoc format (in JSON), filter rules and objects, and export them into a number of other formats. From the FWdoc file you can produce a well readable, cross-referenced HTML summary of the firewall configuration. A dump of network and service objects, users, rules and settings into separate files (TXT and Tab-separated tables) or templates (TXT, CSV, SQL, etc.) is possible. Please visit http://www.wyae.de/software/fwdoc/ for further documentation, the software packages and updates. Please check there for updates prior to submitting patches! There is a user/developer mailing list available. To subscribe send a mail with "subscribe fwtools" as subject to minimalist@wyae.de For bug reports and suggestions or if you just want to talk to me please contact me at volker.tanger@wyae.de or fwtools@wyae.de ======================================================================= Known issue on Windows platforms: ----------------------------------------------------------------------- Users under Windows are occasionally getting the error "IOError: [Errno 9] Bad file descriptor" For some reason, on a Windows platform, you MUST supply the python executable (and path) after the piping character. Apparently this is a known but obscure Windows issue. ======================================================================= Below here there is only additional information on abandoned parts ======================================================================= FWdoc is the successor of ASLrules (for Astaro firewalls), FW1Rules (CheckPoint Firewall-1) and ReadConfig (Raptor/Axent firewalls). ----------------------------------------------------------------------- FWdoc_to_Template ----------------------------------------------------------------------- ...given up, as within-template "programming" was just as complex (at least) as hardcoded python routines. On contrary: the latter offer proper error messages/debugging and robustness - and do not need external libraries. v0.3 next try with Cheetah (http://www.cheetahtemplate.org/) sorted internally generated objectslist[] and serviceslist[] v0.2 next try with Jinja (http://wsgiarea.pocoo.org/jinja/) which did not work out as it won't work with dictionaries using variable keys v0.1 first programming with pyTemple/tplEngine (http://www.naderman.de/pyTemple/) which did not work out as that had problems with unused template parts ----------------------------------------------------------------------- Shortcut: Distributable under GPL ----------------------------------------------------------------------- Copyright (C) 2006-2010 Volker Tanger This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. or on their website http://www.gnu.org/copyleft/gpl.html -----------------------------------------------------------------------