---
name: "lokkit"
section: "8"
platform: "linux"
package: "lokkit"
version: "0.50.22-7.1"
release: "Debian 4.0 (Etch)"
platforms: ["linux"]
url: "https://new.carta.tech/lokkit"
---

# lokkit(8)

simple firewall configuration tool

## NAME

lokkit, gnome-lokkit - simple firewall configuration tool

## SYNOPSIS

**gnome-lokkit** \[*options*\]\
 **lokkit** \[*options*\]

## DESCRIPTION

This manual page briefly documents the **gnome-lokkit** and **lokkit** commands. This manual page was written for the Debian distribution because the original programs do not have a manual page.  Instead, it has documentation in HTML format; see below.

**lokkit** is a basic firewall configuration tool, designed for ease of use and configuration.  While it does not meet the needs for a corporate firewall, it is more than sufficient for workstations and for most home network gateways.  It can also help detect if you are running an open mail relay.

## OPTIONS

These programs follow the usual GNU command line syntax, with long options starting with two dashes (\`-'). A summary of options is included below.

- **-h, --help**

  Show summary of options.

- **--version**

  Show version of program.  (gnome-lokkit only)

- **-f, --fwtype**

  Write Red Hat-style ipchains rules, rather than a shell script.

## LOKKIT OPTIONS

These options are only supported by **lokkit**.

- **-q, --quiet**

  Run non-interactively; only the command-line arguments will be processed.

- **-n, --nostart**

  Do not start the firewall after configuration.

- **--high**

  Use the highest security level (default).

- **--medium**

  Use the medium security level.

- **--disabled**

  Disable the firewall.

- **--dhcp**

  Allow DHCP messages through the firewall.  If your machine is configured using DHCP, you probably should enable this.

- **-p port:protocol, --port=port:protocol**

  Allow a specific port through the firewall.  Ports can be either numeric or listed in /etc/services, while protocols can be numeric or listed in /etc/protocols.  For example, to allow active-mode FTP to work, use **ftp-data:tcp**.

- **-t device, --trust=device**

  Trust all traffic on the specified device (for example, eth0).

- **--usage**

  Show a brief usage message.

## SEE ALSO

[**ipchains**(8)](/ipchains/8.md) **/etc/services** **/etc/protocols**\
 The programs are documented fully in the GNOME Help system.

## AUTHOR

This manual page was written by Chris Lawrence \<lawrencc@debian.org\>, for the Debian GNU/Linux system (but may be used by others).

lokkit and gnome-lokkit were written by Alan Cox \<alan@redhat.com\> and documented by Alan Cox and Telsa Gwynne \<telsa@linuxchix.org\>.