

Shorewall
The Shoreline Firewall, more commonly known as “Shorewall”, is high-level tool for configuring Netfilter. You describe your firewall/gateway requirements using entries in a set of configuration files. Shorewall reads those configuration files and with the help of the iptables...
Features
- Firewall
- Gateway
Tags
- netfilter
Shorewall News & Activities
Recent activities
Shorewall information
What is Shorewall?
The Shoreline Firewall, more commonly known as “Shorewall”, is high-level tool for configuring Netfilter. You describe your firewall/gateway requirements using entries in a set of configuration files. Shorewall reads those configuration files and with the help of the iptables, iptables-restore, ip and tc utilities, Shorewall configures Netfilter and the Linux networking subsystem to match your requirements. Shorewall can be used on a dedicated firewall system, a multi-function gateway/router/server or on a standalone GNU/Linux system. Shorewall does not use Netfilter's ipchains compatibility mode and can thus take advantage of Netfilter's connection state tracking capabilities.


Comments and Reviews
When I was new to iptables, shorewall scripts got me started easily. Configuration implies answering basic question on the local network. The output is rather readable, providing an example of how to use iptables effectively. Reading the output brings a working knowledge of iptables as a side effect. I uninstalled shorewall on the next day, but kept on customizing its firewall design ever after.