2. Features and Architecture

LEAF-Bering uClibc traces its lineage back to what was once the "Linux Router Project". The goal was to create an operating system, based on Linux, which would provide the same functionality as a hardware router. LEAF stands for "Linux Embedded Appliance Firewall", and there have been (and still are) IPV6 compatibility, security, simplicity, and flexibility. The basic LBU system includes DHCP, DNS caching, and SSH services, among other things.

The core of LBU, besides the Linux kernel itself, is the Shorewall firewall system, from Tom Eastep. Shorewall is a highly evolved application that reads easily edited (and well commented) configuration files to control the Linux kernel's Netfilter packet filtering system, and can therefore provide advanced routing functions, including stateful packet filtering.

In addition to the base packages that come with LBU, you can also download many