Boot Boot system with K..firewall Firewall is flushed Boot system with S..firewall (DEFAULT) Firewall is flushed Static rules and incoming blocks put in place (no default blocks) Default policy put in place (DEFAULT accept with LARGE warnings!) Learn mason-gui-text or alternate gui called manually Firewall is flushed Static rules and incoming blocks put in place New rules put in place Logging chains and catch-all rules put in place Default policy put in place New log entries converted to rules and added When done, accepted rules must be merged from new rules to static rules At close, S..firewall run Manual Call Mason with manual input and output Packages mason executable and conf file; required for the rest mason-env boot scripts and wrappers mason-gui-text if more than one, user can choose which to symlink to mason-gui mason-gui-gnome mason-gui-kde