%%textdomain fatdoghelp
![ ](fatdog64.png)
# Firewall setup

Fatdog, starting with 700, features [eztables firewall](http://eztables.net/), replacing the pre-historic firewall package used in earlier Fatdogs. Eztables firewall is more sophisticated and offers more features than the previous firewall package, yet the configuration is still simple.

## Configuration

Configuration is done by editing /etc/eztables/eztables.cfg.

The default configuration enables you to browse the web, do time sync with Internet time servers, and connect to remote servers using SSH.

It also enables you to connect to your desktop remotely using SSH (note: the SSH service is disabled by default).

If these settings are not suitable for you, edit this file first before enabling the firewall.

## Documentation

The detailed documentation on how to edit this is available at /usr/share/doc/eztables, but this directory only exists if you have loaded the devx SFS package.

Alternatively you may want to visit the eztables online documentation (but beware that these always document the latest version, so they may or may not apply to the version of eztables used in Fatdog):

- [MANUAL](https://github.com/louwrentius/eztables/blob/master/MANUAL.md)

- [EXAMPLES](https://github.com/louwrentius/eztables/blob/master/EXAMPLES.md)


## Start

The firewall is disabled by default.

To enable it, in the Control Panel, under the "System" tab, launch "Manage Servers and Services", then select the eztables line.

(Or you can do the same by running **fatdog-service-manager.sh** from a terminal.) 

Click "Start" to start the service this one time; click "Enable" so that it will be enabled at every reboot.
