2002-08-13 22:45:21 +02:00
|
|
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
|
|
|
|
<html>
|
|
|
|
|
|
<head>
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-02-08 21:46:02 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-09-16 19:13:10 +02:00
|
|
|
|
<meta http-equiv="Content-Type"
|
|
|
|
|
|
content="text/html; charset=windows-1252">
|
2003-02-20 00:21:55 +01:00
|
|
|
|
<title>Shoreline Firewall (Shorewall) 1.4</title>
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-02-08 21:46:02 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<base
|
|
|
|
|
|
target="_self">
|
2003-02-20 00:21:55 +01:00
|
|
|
|
<meta name="author" content="Tom Eastep">
|
2002-08-13 22:45:21 +02:00
|
|
|
|
</head>
|
2002-09-16 19:13:10 +02:00
|
|
|
|
<body>
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-02-08 21:46:02 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-09-16 19:13:10 +02:00
|
|
|
|
<table border="0" cellpadding="0" cellspacing="4"
|
|
|
|
|
|
style="border-collapse: collapse;" width="100%" id="AutoNumber3"
|
|
|
|
|
|
bgcolor="#4b017c">
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<tbody>
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<tr>
|
|
|
|
|
|
|
|
|
|
|
|
<td width="100%"
|
|
|
|
|
|
height="90">
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2003-01-22 01:37:23 +01:00
|
|
|
|
|
2003-02-04 18:25:01 +01:00
|
|
|
|
|
2002-09-16 19:13:10 +02:00
|
|
|
|
<h1 align="center"> <font size="4"><i> <a
|
2002-09-29 23:42:38 +02:00
|
|
|
|
href="http://www.cityofshoreline.com"> <img vspace="4" hspace="4"
|
|
|
|
|
|
alt="Shorwall Logo" height="70" width="85" align="left"
|
|
|
|
|
|
src="images/washington.jpg" border="0">
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</a></i></font><font
|
|
|
|
|
|
color="#ffffff">Shorewall 1.4 - <font size="4">"<i>iptables
|
2003-02-28 17:00:26 +01:00
|
|
|
|
made easy"</i></font></font></h1>
|
2003-02-25 20:24:41 +01:00
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-01-31 22:50:51 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
<div align="center"><a
|
2003-02-20 00:21:55 +01:00
|
|
|
|
href="http://shorewall.sf.net/1.3/index.html" target="_top"><font
|
|
|
|
|
|
color="#ffffff">Shorewall 1.3 Site here</font></a><br>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</div>
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<br>
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</td>
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</tr>
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
|
|
|
|
|
</tbody>
|
2003-02-25 20:24:41 +01:00
|
|
|
|
|
2002-09-16 19:13:10 +02:00
|
|
|
|
</table>
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-02-08 21:46:02 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
|
|
|
|
|
<div align="center">
|
|
|
|
|
|
|
|
|
|
|
|
<center>
|
|
|
|
|
|
|
2002-09-16 19:13:10 +02:00
|
|
|
|
<table border="0" cellpadding="0" cellspacing="0"
|
|
|
|
|
|
style="border-collapse: collapse;" width="100%" id="AutoNumber4">
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<tbody>
|
2003-02-28 17:00:26 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<tr>
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<td width="90%">
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
|
|
|
|
|
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2003-02-04 16:26:02 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h2 align="left">What is it?</h2>
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
|
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
|
|
|
|
|
<p>The Shoreline Firewall, more commonly known as "Shorewall", is a
|
|
|
|
|
|
<a href="http://www.netfilter.org">Netfilter</a> (iptables) based firewall
|
|
|
|
|
|
that can be used on a dedicated firewall system, a multi-function
|
|
|
|
|
|
gateway/router/server or on a standalone GNU/Linux system.</p>
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2003-01-22 01:37:23 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
|
|
|
|
|
<p>This program is free software; you can redistribute it and/or modify
|
|
|
|
|
|
it under the terms
|
|
|
|
|
|
of <a href="http://www.gnu.org/licenses/gpl.html">Version
|
|
|
|
|
|
2 of the GNU General Public License</a> as published by the Free Software
|
2003-02-28 17:00:26 +01:00
|
|
|
|
Foundation.<br>
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<br>
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
This program is distributed
|
|
|
|
|
|
in the hope that it will be useful, but
|
|
|
|
|
|
WITHOUT ANY WARRANTY; without even the implied
|
|
|
|
|
|
warranty of MERCHANTABILITY or FITNESS FOR A
|
|
|
|
|
|
PARTICULAR PURPOSE. See the GNU General Public License
|
|
|
|
|
|
for more details.<br>
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<br>
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
You should have received
|
|
|
|
|
|
a copy of the GNU General Public License
|
|
|
|
|
|
along with this program; if not, write to
|
|
|
|
|
|
the Free Software Foundation, Inc., 675 Mass
|
2003-02-28 17:00:26 +01:00
|
|
|
|
Ave, Cambridge, MA 02139, USA</p>
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
|
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-01-22 01:37:23 +01:00
|
|
|
|
|
2003-02-08 21:46:02 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
<p><a href="copyright.htm">Copyright 2001, 2002, 2003 Thomas M. Eastep</a></p>
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
|
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-02-04 18:25:01 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<p> <a href="http://leaf.sourceforge.net" target="_top"><img
|
|
|
|
|
|
border="0" src="images/leaflogo.gif" width="49" height="36">
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</a>Jacques Nilo and
|
|
|
|
|
|
Eric Wolzak have a LEAF (router/firewall/gateway
|
|
|
|
|
|
on a floppy, CD or compact flash) distribution called
|
|
|
|
|
|
<i>Bering</i> that features Shorewall-1.3.14
|
|
|
|
|
|
and Kernel-2.4.20. You can find their work at:
|
|
|
|
|
|
<a href="http://leaf.sourceforge.net/devel/jnilo"> http://leaf.sourceforge.net/devel/jnilo<br>
|
|
|
|
|
|
</a></p>
|
|
|
|
|
|
|
|
|
|
|
|
<p><b>Congratulations to Jacques and Eric on the recent release of Bering
|
|
|
|
|
|
1.1!!!</b><br>
|
|
|
|
|
|
</p>
|
|
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-01-31 22:50:51 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
|
|
|
|
|
<h2>This is a mirror of the main Shorewall web site at SourceForge (<a
|
|
|
|
|
|
href="http://shorewall.sf.net" target="_top">http://shorewall.sf.net</a>)</h2>
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-11-09 22:34:47 +01:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
|
|
|
|
|
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h2>News</h2>
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
|
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
|
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2003-01-31 22:50:51 +01:00
|
|
|
|
|
2003-02-08 21:46:02 +01:00
|
|
|
|
|
2003-02-21 23:22:19 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h2></h2>
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-01-22 01:37:23 +01:00
|
|
|
|
|
2003-02-08 21:46:02 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
<p><b>3/14/2003 - Shorewall 1.4.0</b><b> </b><b><img
|
2003-01-31 22:50:51 +01:00
|
|
|
|
border="0" src="images/new10.gif" width="28" height="12" alt="(New)">
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</b></p>
|
2003-02-21 23:22:19 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
<p></p>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
Shorewall 1.4 represents the next step in the evolution of Shorewall.
|
|
|
|
|
|
The main thrust of the initial release is simply to remove the cruft that
|
2003-02-28 17:00:26 +01:00
|
|
|
|
has accumulated in Shorewall over time.<br>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<20><br>
|
|
|
|
|
|
<b>IMPORTANT: Shorewall 1.4.0 requires</b> <b>the iproute package
|
2003-02-28 17:00:26 +01:00
|
|
|
|
('ip' utility).</b><br>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<br>
|
|
|
|
|
|
Function from 1.3 that has been omitted from this version include:<br>
|
|
|
|
|
|
|
2003-02-04 18:25:01 +01:00
|
|
|
|
<ol>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<li>The MERGE_HOSTS variable in shorewall.conf is
|
2003-02-28 17:00:26 +01:00
|
|
|
|
no longer supported. Shorewall 1.4 behavior is the same as 1.3 with MERGE_HOSTS=Yes.<br>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>Interface names of the form <device>:<integer>
|
|
|
|
|
|
in /etc/shorewall/interfaces now generate an error.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>Shorewall 1.4 implements behavior consistent with OLD_PING_HANDLING=No.
|
|
|
|
|
|
OLD_PING_HANDLING=Yes will generate an error at startup as will specification
|
|
|
|
|
|
of the 'noping' or 'filterping' interface options.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>The 'routestopped' option in the /etc/shorewall/interfaces
|
|
|
|
|
|
and /etc/shorewall/hosts files is no longer supported and will generate
|
|
|
|
|
|
an error at startup if specified.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>The Shorewall 1.2 syntax for DNAT and REDIRECT rules
|
|
|
|
|
|
is no longer accepted.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>The ALLOWRELATED variable in shorewall.conf is no longer
|
|
|
|
|
|
supported. Shorewall 1.4 behavior is the same as 1.3 with ALLOWRELATED=Yes.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>The icmp.def file has been removed.<br>
|
2003-02-28 17:00:26 +01:00
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<li value="8">The 'multi' interface option is no longer supported.
|
|
|
|
|
|
<20>Shorewall will generate rules for sending packets back out the same interface
|
2003-02-28 17:00:26 +01:00
|
|
|
|
that they arrived on in two cases:</li>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
</ol>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2003-02-08 21:46:02 +01:00
|
|
|
|
<ul>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<li>There is an <u>explicit</u> policy for the source zone to
|
|
|
|
|
|
or from the destination zone. An explicit policy names both zones and does
|
2003-02-28 17:00:26 +01:00
|
|
|
|
not use the 'all' reserved word.</li>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<li>There are one or more rules for traffic for the source zone
|
|
|
|
|
|
to or from the destination zone including rules that use the 'all' reserved
|
|
|
|
|
|
word. Exception: if the source zone and destination zone are the same then
|
|
|
|
|
|
the rule must be explicit - it must name the zone in both the SOURCE and
|
2003-02-28 17:00:26 +01:00
|
|
|
|
DESTINATION columns.<br>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</li>
|
|
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
</ul>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
<ol>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
</ol>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
Changes for 1.4 include:<br>
|
|
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
<ol>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<li>The /etc/shorewall/shorewall.conf file has been completely
|
|
|
|
|
|
reorganized into logical sections.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>LOG is now a valid action for a rule (/etc/shorewall/rules).<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>The firewall script and version file are now installed
|
|
|
|
|
|
in /usr/share/shorewall.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>Late arriving DNS replies are now silently dropped in
|
2003-02-28 17:00:26 +01:00
|
|
|
|
the common chain by default.<br>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>In addition to behaving like OLD_PING_HANDLING=No, Shorewall
|
|
|
|
|
|
1.4 no longer unconditionally accepts outbound ICMP packets. So if you
|
|
|
|
|
|
want to 'ping' from the firewall, you will need the appropriate rule or
|
|
|
|
|
|
policy.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>CONTINUE is now a valid action for a rule (/etc/shorewall/rules).<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>802.11b devices with names of the form wlan<i><n></i>
|
|
|
|
|
|
now support the 'maclist' option.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li value="8">Explicit Congestion Notification (ECN - RFC 3168) may
|
|
|
|
|
|
now be turned off on a host or network basis using the new /etc/shorewall/ecn
|
|
|
|
|
|
file. To use this facility:<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<20><> a) You must be running kernel 2.4.20<br>
|
|
|
|
|
|
<20><> b) You must have applied the patch in<br>
|
|
|
|
|
|
<20><> http://www.shorewall/net/pub/shorewall/ecn/patch.<br>
|
|
|
|
|
|
<20><> c) You must have iptables 1.2.7a installed.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>The /etc/shorewall/params file is now processed first so that
|
|
|
|
|
|
variables may be used in the /etc/shorewall/shorewall.conf file.<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
</ol>
|
|
|
|
|
|
|
2003-02-28 17:00:26 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
<ul>
|
|
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2003-01-31 22:50:51 +01:00
|
|
|
|
|
2003-02-25 20:24:41 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
</ul>
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2003-01-31 22:50:51 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-02-28 17:00:26 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<p><b></b><a href="News.htm">More News</a></p>
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2003-02-04 18:25:01 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h2><a name="Donations"></a>Donations</h2>
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</td>
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<td width="88"
|
2003-02-20 00:21:55 +01:00
|
|
|
|
bgcolor="#4b017c" valign="top" align="center"> <a
|
2003-01-31 22:50:51 +01:00
|
|
|
|
href="http://sourceforge.net">M</a></td>
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</tr>
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
|
|
|
|
|
</tbody>
|
2003-02-28 17:00:26 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
</table>
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</center>
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</div>
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-09-16 19:13:10 +02:00
|
|
|
|
<table border="0" cellpadding="5" cellspacing="0"
|
|
|
|
|
|
style="border-collapse: collapse;" width="100%" id="AutoNumber2"
|
|
|
|
|
|
bgcolor="#4b017c">
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<tbody>
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<tr>
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<td width="100%"
|
|
|
|
|
|
style="margin-top: 1px;">
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-02-04 18:25:01 +01:00
|
|
|
|
|
2003-02-28 17:00:26 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
2002-09-16 19:13:10 +02:00
|
|
|
|
<p align="center"><a href="http://www.starlight.org"> <img
|
|
|
|
|
|
border="4" src="images/newlog.gif" width="57" height="100" align="left"
|
|
|
|
|
|
hspace="10">
|
2003-02-04 18:25:01 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<20> </a></p>
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
|
|
|
|
|
|
2002-09-29 23:42:38 +02:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2002-11-24 21:08:19 +01:00
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
|
|
|
|
|
<p align="center"><font size="4" color="#ffffff">Shorewall is free but
|
|
|
|
|
|
if you try it and find it useful, please consider making a donation
|
2003-02-28 17:00:26 +01:00
|
|
|
|
to <a
|
2003-03-07 00:41:31 +01:00
|
|
|
|
href="http://www.starlight.org"><font color="#ffffff">Starlight Children's
|
|
|
|
|
|
Foundation.</font></a> Thanks!</font></p>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</td>
|
2003-02-28 17:00:26 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
</tr>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
|
|
|
|
|
|
|
2002-11-09 19:06:34 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
|
|
|
|
|
</tbody>
|
2003-02-28 17:00:26 +01:00
|
|
|
|
|
2003-01-31 22:50:51 +01:00
|
|
|
|
</table>
|
2002-11-09 22:34:47 +01:00
|
|
|
|
|
2003-01-22 01:37:23 +01:00
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
|
2003-03-07 00:41:31 +01:00
|
|
|
|
|
|
|
|
|
|
<p><font size="2">Updated 3/5/2003 - <a href="support.htm">Tom Eastep</a></font>
|
|
|
|
|
|
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</p>
|
|
|
|
|
|
<br>
|
2002-09-16 19:13:10 +02:00
|
|
|
|
</body>
|
|
|
|
|
|
</html>
|
