mercury:~# ./firehol.sh explain

: firehol.sh,v 1.236 2005/06/02 16:20:35 ktsaou Exp $
(C) Copyright 2003, Costa Tsaousis <costa@tsaousis.gr>
FireHOL is distributed under GPL.
Home Page: http://firehol.sourceforge.net

--------------------------------------------------------------------------------
FireHOL controls your firewall. You should want to get updates quickly.
Subscribe (at the home page) to get notified of new releases.
--------------------------------------------------------------------------------

You can now start typing FireHOL configuration directives.
Special interactive commands: help, show, quit

# FireHOL [:] > interface any world 

# \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
# Cmd Line : 1
# Command  : interface any world

# Creating chain 'in_world' under 'INPUT' in table 'filter'
/sbin/iptables -t filter -N in_world 
/sbin/iptables -t filter -A INPUT -j in_world 

# Creating chain 'out_world' under 'OUTPUT' in table 'filter'
/sbin/iptables -t filter -N out_world 
/sbin/iptables -t filter -A OUTPUT -j out_world 

# > OK <
# FireHOL [interface:world] > client dhcp accept 

# \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
# Cmd Line : 2
# Command  : client dhcp accept

# Preparing for service 'dhcp' of type 'client' under interface 'world'

# Creating chain 'in_world_dhcp_c1' under 'in_world' in table 'filter'
/sbin/iptables -t filter -N in_world_dhcp_c1 
/sbin/iptables -t filter -A in_world -j in_world_dhcp_c1 

# Creating chain 'out_world_dhcp_c1' under 'out_world' in table 'filter'
/sbin/iptables -t filter -N out_world_dhcp_c1 
/sbin/iptables -t filter -A out_world -j out_world_dhcp_c1 

# Running complex rules function rules_dhcp() for client 'dhcp'

# Setting up rules for DHCP (client)
/sbin/iptables -t filter -A out_world_dhcp_c1 -p udp --sport 68 --dport 67 -j ACCEPT 
/sbin/iptables -t filter -A in_world_dhcp_c1 -p udp --sport 67 --dport 68 -j ACCEPT 

# > OK <
# FireHOL [interface:world] > quit

version 5

interface any world
        client dhcp accept

mercury:~#