Shorewall Documentation

Tom Eastep

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the license is included in the section entitled “GNU Free Documentation License”.

2004-11-18


Note

The complete Shorewall Documentation is available for download in both Docbook XML and HTML formats.

Caution

Are you running Shorewall on Mandrake™ Linux with a two-interface setup?

If so and if you configured your system while running a Mandrake release earlier than 10.0 final then this documentation will not apply directly to your environment. If you want to use the documentation that you find here, you will want to consider uninstalling what you have and installing a configuration that matches this documentation. See the Two-interface QuickStart Guide for details.

The remainder of the Documentation supplements the QuickStart Guides. Please review the appropriate guide before trying to use this documentation directly.

  1. 2.6 Kernel

  2. Accounting

  3. Aliased (virtual) Interfaces (e.g., eth0:0)

  4. Bandwidth Control

  5. Blacklisting

    • Static Blacklisting using /etc/shorewall/blacklist

    • Dynamic Blacklisting using /sbin/shorewall

  6. Bridge/Firewall

  7. Commands (Description of all /sbin/shorewall commands)

  8. Common configuration file features 

  9. Configuration File Reference Manual

  10. Corporate Network Example (Contributed by a Graeme Boyle)

  11. DHCP

  12. ECN Disabling by host or subnet

  13. Errata

  14. Error Messages

  15. Extension Scripts (How to extend Shorewall without modifying Shorewall code through the use of files in /etc/shorewall -- /etc/shorewall/start, /etc/shorewall/stopped, etc.)

  16. Fallback/Uninstall

  17. FAQs

  18. Features

  19. Forwarding Traffic on the Same Interface

  20. FTP and Shorewall

  21. Getting help or answers to questions

  22. Installation/Upgrade

  23. IPP2P

  24. IPSEC

  25. IPSEC using Kernel 2.6 and Shorewall 2.1 or Later.

  26. Kazaa Filtering

  27. Kernel Configuration

  28. Logging

  29. MAC Verification

  30. Multiple Zones Through One Interface

  31. My Shorewall Configuration (How I personally use Shorewall)

  32. Netfilter Overview

  33. Network Mapping

  34. One-to-one NAT (Static NAT)

  35. OpenVPN

  36. Operating Shorewall

  37. Packet Processing in a Shorewall-based Firewall

  38. 'Ping' Management

  39. Port Information

    • Which applications use which ports

    • Ports used by Trojans

  40. PPTP

  41. Proxy ARP

  42. Release Model

  43. Requirements

  44. Routing on One Interface

  45. Samba

  46. Shorewall Setup Guide

  47. SMB

  48. Starting/stopping the Firewall

    • Description of all /sbin/shorewall commands

    • How to safely test a Shorewall configuration change

  49. Squid with Shorewall

  50. Static (one-to-one) NAT

  51. Traffic Accounting

  52. Traffic Shaping/QOS

  53. Troubleshooting (Things to try if it doesn't work)

  54. User-defined Actions

  55. UID/GID Based Rules

  56. Upgrade Issues

  57. VPN

  58. White List Creation