Shorewall 3.x Documentation

Tom Eastep

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the license is included in the section entitled “GNU Free Documentation License”.

2005-12-30


Caution

This article applies to Shorewall 3.0 and later. If you are running a version of Shorewall earlier than Shorewall 3.0.0 then please see the documentation for that release.

Note

The complete Shorewall Documentation is available for download in both Docbook XML and HTML formats.

Frequently asked questions:

If you are new to Shorewall, please read these two articles first.

The following article is also recommended reading for newcomers.

The remainder of the Documentation supplements the QuickStart Guides. Please review the appropriate guide before trying to use this documentation directly.

Note

This index is in alphabetical order.

  1. 2.6 Kernel

  2. Accounting

  3. Actions

  4. Aliased (virtual) Interfaces (e.g., eth0:0)

  5. Bandwidth Control

  6. Blacklisting

    • Static Blacklisting using /etc/shorewall/blacklist

    • Dynamic Blacklisting using /sbin/shorewall

  7. Bridging

  8. Commands (Description of all /sbin/shorewall commands)

  9. Configuration File Reference Manual

  10. Corporate Network Example (Contributed by a Graeme Boyle)

  11. DHCP

  12. ECN Disabling by host or subnet

  13. Error Messages

  14. Extension Scripts (How to extend Shorewall without modifying Shorewall code through the use of files in /etc/shorewall -- /etc/shorewall/start, /etc/shorewall/stopped, etc.)

  15. Fallback/Uninstall

  16. FAQs

  17. Features

  18. Forwarding Traffic on the Same Interface

  19. FTP and Shorewall

  20. Getting help or answers to questions

  21. Installation/Upgrade

  22. IPP2P

  23. IPSEC

  24. IPSEC using Kernel 2.6 and Shorewall 2.1 or Later.

  25. Ipsets

  26. Kazaa Filtering

  27. Kernel Configuration

  28. Logging

  29. Macros

  30. MAC Verification

  31. Multiple Internet Connections from a Single Firewall

  32. Multiple Zones Through One Interface

  33. My Shorewall Configuration (How I personally use Shorewall)

  34. Netfilter Overview

  35. Network Mapping

  36. One-to-one NAT (Static NAT)

  37. OpenVPN

  38. Operating Shorewall

  39. Packet Processing in a Shorewall-based Firewall

  40. 'Ping' Management

  41. Port Information

    • Which applications use which ports

    • Ports used by Trojans

  42. Port Knocking and Other Uses of the 'Recent Match'

  43. PPTP

  44. Proxy ARP

  45. Release Model

  46. Requirements

  47. Routing and Shorewall

  48. Routing on One Interface

  49. Samba

  50. Shorewall Setup Guide

  51. SMB

  52. Squid with Shorewall

  53. Starting/stopping the Firewall

    • Description of all /sbin/shorewall commands

    • How to safely test a Shorewall configuration change

  54. Static (one-to-one) NAT

  55. Support

  56. Traffic Accounting

  57. Traffic Shaping/QOS

  58. Troubleshooting (Things to try if it doesn't work)

  59. UPnP

  60. Upgrade Issues

  61. VPN

  62. White List Creation

  63. Xen and Shorewall