Shorewall 4.4 Documentation

Tom Eastep

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the license is included in the section entitled “GNU Free Documentation License”.


Frequently Used Articles

FAQs (Français)
Beginner Documentation

Index to the Articles

 KVM (Kernel-mode Virtual Machine)Shorewall Perl
6to4 TunnelsLimiting Connection RatesShorewall Setup Guide
ActionsMacrosSNAT (Source Network Address Translation)
Aliased (virtual) Interfaces (e.g., eth0:0)MAC VerificationSplit DNS the Easy Way
Anatomy of Shorewall (Russian)Man PagesSquid with Shorewall
Bandwidth Control (Russian)Manual ChainsStarting/stopping the Firewall
Blacklisting (Russian)MasqueradingStatic (one-to-one) NAT
Bridge: Shorewall-perlMultiple Internet Connections from a Single Firewall (Russian)Support
Bridge: No control of traffic through the bridgeMultiple Zones Through One InterfaceTraffic Accounting
Building Shorewall from SVNMy Shorewall ConfigurationTraffic Shaping/QOS (Russian)
CommandsNetfilter OverviewTransparent Proxy
Compiled Firewall ProgramsNetwork MappingUPnP
Configuration File BasicsOne-to-one NAT (Static NAT)Upgrade Issues
DNAT (Destination Network Address Translation)OpenVZVPN Passthrough
Dynamic ZonesOperating ShorewallWhite List Creation
ECN Disabling by host or subnetPacket MarkingXen - Shorewall in a Bridged Xen DomU
Extension Scripts (User Exits)Packet Processing in a Shorewall-based FirewallXen - Shorewall in Routed Xen Dom0
Fallback/Uninstall'Ping' Management 
FAQsPort Forwarding 
FeaturesPort Information 
Forwarding Traffic on the Same InterfacePort Knocking and Other Uses of the 'Recent Match' 
FTP and ShorewallPPTP 
Fool's FirewallProxy ARP 
Getting help or answers to questionsQuickStart Guides 
Installation/Upgrade (Français)Release Model 
IPSEC using Kernel 2.6 and Shorewall 2.1 or LaterRouting and Shorewall 
IpsetsRouting on One Interface 
IPv6 SupportSamba 
Kazaa FilteringShorewall on a Laptop 
Kernel ConfigurationShorewall Lite