Activate Firewall rules

[mroland]

How do we can (de-)activate a Firewall rule in a shell-script?
Is it possible to remotely control the WUI (firewall.cgi) via wget/curl/HTTPie?

I would also like to know what was asked here: time constraints

[bbitsch (Bernhard Bitsch)]

Which firewall rules are you talking of?
The rules defined in the WUI are saved in /var/ipfire/firewall/{config,input,outgoing}
Editing/changing this files and running /usr/local/bin/firewallctrl afterwards changes the iptables firewall.

[stevee (Stefan Schantl)]

@mroland

I would also like to know what was asked here: time constraints

Creating Firewall Rules (reference) - The IPFire Wiki

Use time constraints
In order to use time constraints, the checkbox “Use time constraints” has to be selected.

Additional options will be displayed where you can select the day(s) and a time period. The created firewall rule only has an effect on the configured day(s) and the chosen time period.

Time constraints can be used for various duties, for example to block or gain internet access in a defined time period of the day, restrict VPN client connections on the weekend, allow connections for scheduled maintenance tasks in the night, etc.

Best regards,

-Stefan

[mroland]

Yes, exactly these rules. I will change these CSV files by script. In the fourth column, either ‘ON’ or nothing and then let the firewallctrl run. Remote SSH is a good solution for the first. Then I make a web solution with Node-RED to carry out the script. Thanks very much.