shorewall
A high-level tool for configuring Netfilter
The Shoreline Firewall, more commonly known as "Shorewall", is high-level tool for configuring Netfilter. You describe your firewall/gateway requirements using entries in a set of configuration files. Shorewall reads those configuration files and with the help of the iptables, iptables-restore, ip and tc utilities, Shorewall configures Netfilter and the Linux networking subsystem to match your requirements. Shorewall can be used on a dedicated firewall system, a multi-function gateway/router/server or on a standalone GNU/Linux system. Shorewall does not use Netfilter's ipchains compatibility mode and can thus take advantage of Netfilter's connection state tracking capabilities. Shorewall is not a daemon. Once Shorewall has configured the Linux networking subsystem, its job is complete and there is no "Shorewall process" left running in your system. The /usr/sbin/shorewall program can be used at any time to monitor the Netfilter firewall.
homepage ↗ sourceforge: shorewall
Available in
| Overlay | Newest | Ebuilds | Last activity | |
|---|---|---|---|---|
| gentoo gitweb ↗ | 5.2.8-r2 | 1 | 17 h | details › |
| peec Codeberg ↗ | 5.2.8-r5 | 1 | 49 d | details › |
Versions & arches
| Version | Overlay | amd64 | x86 | ppc64 | alpha | hppa | ppc | sparc | Committed | |
|---|---|---|---|---|---|---|---|---|---|---|
| 5.2.8-r5 | peec | amd64 stable | x86 stable | ppc64 stable | alpha testing | hppa stable | ppc stable | sparc stable | 16 mo | view · download · history ↗ |
| 5.2.8-r2 | gentoo | amd64 stable | x86 stable | ppc64 stable | alpha testing | hppa testing | ppc stable | sparc testing | — | view · download · history ↗ |
Use flags of 5.2.8-r5
- doc Add extra documentation (API, Javadoc, etc). It is recommended to enable per package instead of globally
- +init Adds the capability to place the firewall in a safe state prior to bringing up the network interfaces
- +ipv4 Installs everything needed to create a full IPv4 firewall
- ipv6 Adds the capability to create a full IPv6 firewall (requires net-firewall/shorewall ipv4 USE flag)
- lite4 Installs everything needed to just *run* an IPv4 compiled firewall script created with net-firewall/shorewall ipv4 USE flag
- lite6 Installs everything needed to just *run* an IPv6 compiled firewall script created with net-firewall/shorewall ipv6 USE flag
- selinux !!internal use only!! Security Enhanced Linux support, this must be set by the selinux profile or breakage will occur