Contents
Where do I find the Shorewall configuration file?
The configuration files for Shorewall are contained in the directory /etc/shorewall — for most setups, you will only need to deal with a few of these as described in this guide. Skeleton files are created during the Shorewall Installation Process.
What are the new rules for Shorewall 4.5.7?
Added in Shorewall 4.5.7. This action requires that the HELPER column contains the name of the Netfilter helper to be associated with connections matching this connection. May only be specified in the NEW section and is useful for being able to specify a helper when the applicable policy is ACCEPT.
How is Shorewall built on top of Netfilter?
Shorewall is built on top of the Netfilter kernel facility. Netfilter implements a connection tracking function that allows what is often referred to as stateful inspection of packets. This stateful property allows firewall rules to be defined in terms of connections rather than in terms of packets. With Shorewall, you:
Is there such a thing as a Shorewall zone?
With the exception of the name assigned to the firewall zone, Shorewall attaches absolutely no meaning to zone names. Zones are entirely what YOU make of them. That means that you should not expect Shorewall to do something special “because this is the Internet zone” or “because that is the DMZ”.
What are the default policies for a Shorewall?
Rules about what traffic to allow and what traffic to deny are expressed in terms of zones. You express your default policy for connections from one zone to another zone in the /etc/shorewall/policy file. You define exceptions to those default policies in the /etc/shorewall/rules.
How is a zone defined in a Shorewall?
Shorewall views the network where it is running as being composed of a set of zones. A zone is one or more hosts, which can be defined as individual hosts or networks in /etc/shorewall/hosts, or as an entire interface in /etc/shorewall/interfaces.