What is Shorewall? Shorewall is a gateway/firewall configuration tool for GNU/Linux. For a high level description of Shorewall, see the Introduction to Shorewall. To review Shorewall functionality, see the Features Page. Getting Started with Shorewall. New to Shorewall?

2020年9月13日 · The shell-based compiler is retired. With Shorewall 4.4, there are five packages: Shorewall -- Includes everything needed to create an IPv4 firewall. Shorewall6 -- Requires the Shorewall package and adds the capability to create an IPv6 firewall.

2012年4月4日 · The Shorewall Setup Guide outlines the steps necessary to set up a firewall where there are multiple public IP addresses involved or if you want to learn more about Shorewall than is explained in the single-address guides above.

2020年4月17日 · Shorewall views the network where it is running as being composed of a set of zones. A zone is one or more hosts, which can be defined as individual hosts or networks in /etc/shorewall/hosts, or as an entire interface in /etc/shorewall/interfaces. In this guide, we will use the following zones:

2020年2月16日 · Shorewall on a Laptop: Accounting: Linux Containers (LXC) Shorewall Perl: Actions: Linux-vserver: Shorewall Setup Guide: Aliased (virtual) Interfaces (e.g., eth0:0) Limiting Connection Rates: SMB: Anatomy of Shorewall: Logging: …

2020年4月17日 · Shorewall is designed to allow the default behavior of the product to evolve over time. To make this possible, the design assumes that you will not replace your current shorewall.conf file during upgrades.

2009年6月28日 · Shorewall-lite-- a light-weight Shorewall version that will run compiled firewall scripts generated on a system with one of the compiler packages installed. In Shorewall version 4.2.* , there are two additional packages that provide IPv6 support:

2020年4月17日 · Shorewall est conçu pour permettre à son comportement par défaut d'évoluer dans le temps. Pour que ce la soit possible, il est supposé de conception que vous ne remplacerez pas votre fichier shorewall.conf lors des mises à jour.

2020年3月6日 · Shorewall allows for central administration of multiple IPv6 firewalls through use of Shorewall6 lite. The full Shorewall and Shorewall6 products are installed on a central administrative system where compiled Shorewall scripts are generated.

The state of the firewall is stored in /var/lib/shorewall/ filename for use by the shorewall restore and shorewall -f start commands. If filename is not given then the state is saved in the file specified by the RESTOREFILE option in shorewall.conf (5).