The first launch
By default, the settings have the parameter testing = true and the parameter testing_interval = 5. This enables the test mode and after starting the daemon, after 5 minutes the daemon will shut down and clear all nftables rules. This is necessary so that before enabling it, you can test the rules and make sure that everything works as it should and that your access rights are not blocked. After you have made sure that everything is set up correctly, do not forget to change the testing parameter to false.
The action plan after installation is as follows:
- We have checked and edited the settings (/etc/kor-elf-shield/kor-elf-shield.toml) for your tasks. Documentation on these settings is available here.
- We have checked and edited the settings of the farewell (/etc/kor-elf-shield/firewall.toml) for your tasks. Documentation on these settings is available here.
- We tested it and made sure that everything was fine.
- Changing testing to false.
Attention by default, incoming and outgoing traffic is blocked. This behavior can be changed in the farewall settings.
To enable the program in autorun, run the command:
sudo systemctl enable kor-elf-shield
To start the program, run the command:
sudo systemctl start kor-elf-shield
To disable the program, run the command (but keep in mind that disabling the program automatically clears all the rules in nftables):
sudo systemctl stop kor-elf-shield