---
name: "ipfwadm-wrapper"
section: "8"
platform: "linux"
package: "ipchains"
version: "1.3.10-15"
release: "Debian 3.1 (Sarge)"
platforms: ["linux"]
url: "https://new.carta.tech/ipfwadm-wrapper"
---

# ipfwadm-wrapper(8)

IP firewall administration

## NAME

ipfwadm-wrapper - IP firewall administration

## SYNOPSIS

**ipfwadm-wrapper -A** command parameters \[options\]\
 **ipfwadm-wrapper -I** command parameters \[options\]\
 **ipfwadm-wrapper -O** command parameters \[options\]\
 **ipfwadm-wrapper -F** command parameters \[options\]\
 **ipfwadm-wrapper -M** \[ -l \| -s \] \[options\]

## DESCRIPTION

Ipfwadm-wrapper emulates the behaviour of ipfwadm. You can use this wrapper to use your old ipfwadm firewall rules with ipchains. See [ipfwadm(8)](/ipfwadm/8.md) for more details.

If the kernel does not support ipchains (eg. a 2.0 kernel), and the file /sbin/ipfwadm.real exists and is executable, then it will be executed with the arguments given to ipfwadm-wrapper.  This allows simple dual-booting of 2.2 and 2.0 kernels with the same firewalling scripts: simply move ipfwadm to ipfwadm.real, and ipfwadm-wrapper to ipfwadm.

## SEE ALSO

[ipfwadm(8)](/ipfwadm/8.md), [ipchains(8)](/ipchains/8.md)

## BUGS

The script isn't clever at parsing command line arguments.  You must use separate arguments, rather than run them together.  For example, \`ipfwadm -Mle' becomes \`ipfwadm-wrapper -M -l -e'.

Fragment accounting rules are not translated correctly; they will account packets with source port 65535.

Due to new kernel restrictions, you must be root even to list rules for 2.2 kernels.

If /usr is mounted from NFS, you will not be able to use ipfwadm-wrapper before /usr is mounted.

## AUTHOR

Paul \`\`Rusty'' Russell \<ipchains@rustcorp.com\>