uruk - Very small firewall script, for configuring iptables

Property Value
Distribution Debian 7 (Wheezy)
Repository Debian Main i386
Package name uruk
Package version 20120608.1
Package release 1
Package architecture all
Package type deb
Installed size 198 B
Download size 74.31 KB
Official Mirror ftp.br.debian.org
Uruk is a wrapper for Linux ip[6]tables.  A very simple shell script, but
useful if you need similar (but not the same) packet filtering configurations
on lots of hosts.  It uses a template file, which gets sourced as a shell
script, to get lists of source addresses, allowed to use specific network
services.  Listing these groups of allowed hosts and allowed services is all
what's needed to configure your box.
Main difference with other firewall setup tools: uruk is just a very small
(just 14K!) shell script, no gui, no interactive setup, no default
configuration.  You'll like this if you'd rather not have lots of (probably
buggy) code between you and your filtering rules.


Package Version Architecture Repository
uruk_20120608.1-1_all.deb 20120608.1 all Debian Main
uruk - - -


Name Value
iptables -


Type URL
Binary Package uruk_20120608.1-1_all.deb
Source Package uruk

Install Howto

  1. Update the package index:
    # sudo apt-get update
  2. Install uruk deb package:
    # sudo apt-get install uruk




2012-10-25 - Joost van Baal-Ilić <joostvb@debian.org>
uruk (20120608.1-1) testing-proposed-updates; urgency=low
* New upstream release, for Debian "wheezy". 
2012-06-12 - Joost van Baal-Ilić <joostvb@debian.org>
uruk (20120608-1) unstable; urgency=low
* New upstream release: The Hooidonk Release.
- updated lsb headers in init script
* debian/watch: added: uscan support.
* debian/rules: install scripts in /sbin, not /usr/sbin.  Early in boot, /usr
might not yet have been mounted.
2012-06-05 - Joost van Baal-Ilić <joostvb@debian.org>
uruk (20120605-1) unstable; urgency=low
* New upstream release:
- no longer die if programs zoem, col and/or groff are not found.  (Thanks
Lucas Nussbaum for reporting the issue.)  Closes: #676067
2012-05-30 - Joost van Baal-Ilić <joostvb@debian.org>
uruk (20120530-1) unstable; urgency=low
* New upstream release.
* debian/{ifup,rules,conffiles}: ifup added, installed as
/etc/network/if-up.d/uruk.  We now support ifup/ifdown and networkmanager.
* debian/control: no longer Build-Depends-Indep upon zoem (>= 10-265), aephea,
groff-base, bsdmainutils: upstream now ships typesetted docs.
* debian/copyright: document license of new upstream file
* debian/source/format: changed to 3.0 (quilt) format.
* debian/rules: add recommended targets build-arch and build-indep.
* debian/control: Standards-Version compliancy upgraded from 3.9.2 to
3.9.3 (no further changes needed).
* debian/control: changed my name.
2011-06-08 - Joost van Baal <joostvb@debian.org>
uruk (20110608-1) unstable; urgency=low
* New upstream release: The IPv6 Day release!.  Missed 20110213 and
* debian/control: Standards-Version compliancy upgraded from 3.9.1 to
3.9.2 (no further changes needed).
* control: build-depends: add aephea, update zoem (>= 10-265):
incompatible zoem changes.
2010-08-31 - Joost van Baal <joostvb@debian.org>
uruk (20100831-2) unstable; urgency=low
* postinst: add "1" to the runlevels to stop the service in update-rc.d
call: back in sync with LSB headers in upstream supplied init-script
(Closes: #581659).
2010-08-31 - Joost van Baal <joostvb@debian.org>
uruk (20100831-1) unstable; urgency=low
* New upstream release.
2010-08-23 - Joost van Baal <joostvb@debian.org>
uruk (20100823-1) unstable; urgency=low
* New upstream release.  Missed 20100820 (and 20100821), which introduced:
+ Fix bugs in support for dependency based boot sequencing (which is the
default in "Squeeze"; Boot Performance is a goal for the upcoming Debian
"Squeeze" release)
- init/uruk.in: Fix LSB init header: we want to start early in boot
sequence (on entering runlevel S).  LSB init.d header however had
"Default-Start: 2 3 5". This is now fixed to S.  Partially fixes
bug 581659. (Upgrade's are likely not yet handled gracefully.) Thanks
Petter Reinholdtsen for reporting and for the patch.
- Furthermore, change Default-Stop: "0 6" to "0 1 6": no need to special
case runlevel 1 (thanks lintian).
- Finally, added "$remote_fs" to Required-Start: and Required-Stop: since
obviously we need /usr/sbin/uruk to be available (thanks again lintian).
+ Enable support for IPv6 packet filtering (full IPv6 support
is a goal for the upcoming Debian "Squeeze" release).  ip6tables is now
enabled in the uruk script by default.  If you interact with uruk using
the init script (which is the default), uruk's default behaviour however
is not changed.
* debian/copyright: updated to new upstream.
* debian/control: the uruk script size no longer is 11 K but 13 K: update
* debian/control: Standards-Version compliancy upgraded from 3.8.4 to
3.9.1 (no further changes needed).

See Also

Package Description
usb-modeswitch-data_20120815-2_all.deb mode switching data for usb-modeswitch
usb-modeswitch_1.2.3+repack0-1_i386.deb mode switching tool for controlling "flip flop" USB devices
usbip_1.1.1+3.2.17-1_i386.deb USB device sharing system over IP network
usbmount_0.0.22_all.deb automatically mount and unmount USB mass storage devices
usbmuxd_1.0.7-2_i386.deb USB multiplexor daemon for iPhone and iPod Touch devices
usbprog-gui_0.2.0-2_i386.deb GUI firmware programming tool for the USBprog hardware
usbprog_0.2.0-2_i386.deb Firmware programming tool for the USBprog hardware
usbredirserver_0.4.3-2_i386.deb Simple USB host TCP server
usbutils_005-3_i386.deb Linux USB utilities
usbview_1.1-1_i386.deb USB device viewer
usemod-wiki_1.0.5-1+deb7u1_all.deb Perl-based Wiki clone
usepackage_1.8-1_i386.deb utility to manage environment variables from within dotfiles
user-he_1.0.20_all.deb Hebrew support for Debian based systems
user-mode-linux-doc_20060501-1_all.deb User-mode Linux (Documentation)
user-mode-linux_3.2-2um-1+deb7u2+b3_i386.deb User-mode Linux (kernel)