2002-09-16 19:02:45 +02:00
|
|
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
2002-08-07 16:28:04 +02:00
|
|
|
|
<html>
|
|
|
|
|
|
<head>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-03-08 16:48:57 +01:00
|
|
|
|
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
2002-09-16 19:02:45 +02:00
|
|
|
|
<meta http-equiv="Content-Language" content="en-us">
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-03-08 16:48:57 +01:00
|
|
|
|
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
2002-09-16 19:02:45 +02:00
|
|
|
|
<meta http-equiv="Content-Type"
|
|
|
|
|
|
content="text/html; charset=windows-1252">
|
2003-03-08 16:48:57 +01:00
|
|
|
|
<title>Shorewall Support Guide</title>
|
2002-08-07 16:28:04 +02:00
|
|
|
|
</head>
|
2002-09-16 19:02:45 +02:00
|
|
|
|
<body>
|
2003-02-14 22:27:03 +01:00
|
|
|
|
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
2002-09-16 19:02:45 +02:00
|
|
|
|
<table border="0" cellpadding="0" cellspacing="0"
|
|
|
|
|
|
style="border-collapse: collapse;" width="100%" id="AutoNumber1"
|
|
|
|
|
|
bgcolor="#400169" height="90">
|
2003-03-18 16:16:33 +01:00
|
|
|
|
<tbody>
|
|
|
|
|
|
<tr>
|
|
|
|
|
|
<td width="100%">
|
2003-01-14 21:32:45 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-02-14 22:27:03 +01:00
|
|
|
|
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-03-08 16:48:57 +01:00
|
|
|
|
<h1 align="center"><font color="#ffffff">Shorewall Support Guide<img
|
2002-12-28 16:38:03 +01:00
|
|
|
|
src="images/obrasinf.gif" alt="" width="90" height="90" align="middle">
|
2003-03-18 16:16:33 +01:00
|
|
|
|
</font></h1>
|
|
|
|
|
|
</td>
|
|
|
|
|
|
</tr>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-03-08 16:48:57 +01:00
|
|
|
|
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
</tbody>
|
2002-08-22 23:33:54 +02:00
|
|
|
|
</table>
|
2003-02-14 22:27:03 +01:00
|
|
|
|
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
<h2>Before Reporting a Problem or Asking a Question<br>
|
|
|
|
|
|
</h2>
|
|
|
|
|
|
There are a number
|
|
|
|
|
|
of sources of Shorewall information. Please try these before you post.
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-08-22 23:33:54 +02:00
|
|
|
|
<ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
<li>More than half of the questions posted
|
|
|
|
|
|
on the support list have answers directly accessible from the <a
|
2003-01-14 21:32:45 +01:00
|
|
|
|
href="shorewall_quickstart_guide.htm#Documentation">Documentation Index</a><br>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
</li>
|
|
|
|
|
|
<li> The <a
|
2003-03-08 16:48:57 +01:00
|
|
|
|
href="FAQ.htm">FAQ</a> has solutions to more than 20 common problems.
|
2003-03-18 16:16:33 +01:00
|
|
|
|
</li>
|
|
|
|
|
|
|
|
|
|
|
|
<li> The <a
|
2003-03-08 16:48:57 +01:00
|
|
|
|
href="troubleshoot.htm">Troubleshooting</a> Information contains
|
2003-03-18 16:16:33 +01:00
|
|
|
|
a number of tips to help you solve common problems.
|
|
|
|
|
|
</li>
|
|
|
|
|
|
|
|
|
|
|
|
<li> The <a
|
|
|
|
|
|
href="errata.htm"> Errata</a> has links to download updated
|
|
|
|
|
|
components. </li>
|
|
|
|
|
|
|
|
|
|
|
|
<li> The Site and Mailing
|
|
|
|
|
|
List Archives search facility can locate documents and posts
|
|
|
|
|
|
about similar problems: </li>
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
</ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<h2>Site and Mailing List Archive Search</h2>
|
|
|
|
|
|
|
|
|
|
|
|
<blockquote>
|
|
|
|
|
|
<form method="post"
|
|
|
|
|
|
action="http://lists.shorewall.net/cgi-bin/htsearch"> <font size="-1"> Match:
|
|
|
|
|
|
|
|
|
|
|
|
<select name="method">
|
|
|
|
|
|
<option value="and">All </option>
|
|
|
|
|
|
<option value="or">Any </option>
|
|
|
|
|
|
<option value="boolean">Boolean </option>
|
|
|
|
|
|
</select>
|
|
|
|
|
|
Format:
|
|
|
|
|
|
<select name="format">
|
|
|
|
|
|
<option value="builtin-long">Long </option>
|
|
|
|
|
|
<option value="builtin-short">Short </option>
|
|
|
|
|
|
</select>
|
|
|
|
|
|
Sort by:
|
|
|
|
|
|
<select name="sort">
|
|
|
|
|
|
<option value="score">Score </option>
|
|
|
|
|
|
<option value="time">Time </option>
|
|
|
|
|
|
<option value="title">Title </option>
|
|
|
|
|
|
<option value="revscore">Reverse Score </option>
|
|
|
|
|
|
<option value="revtime">Reverse Time </option>
|
|
|
|
|
|
<option value="revtitle">Reverse Title </option>
|
|
|
|
|
|
</select>
|
|
|
|
|
|
</font><input type="hidden" name="config" value="htdig"><input
|
|
|
|
|
|
type="hidden" name="restrict" value=""><font size="-1"> Include Mailing
|
|
|
|
|
|
List Archives:
|
|
|
|
|
|
<select size="1" name="exclude">
|
|
|
|
|
|
<option value="">Yes</option>
|
|
|
|
|
|
<option value="[http://lists.shorewall.net/pipermail/.*]">No</option>
|
|
|
|
|
|
</select>
|
|
|
|
|
|
</font><br>
|
|
|
|
|
|
Search: <input type="text" size="30" name="words" value=""> <input
|
|
|
|
|
|
type="submit" value="Search"><br>
|
|
|
|
|
|
</form>
|
|
|
|
|
|
</blockquote>
|
|
|
|
|
|
|
|
|
|
|
|
<h2>Problem Reporting Guidelines<br>
|
|
|
|
|
|
</h2>
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-11-24 21:12:22 +01:00
|
|
|
|
<ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
<li>Please remember we only know what is posted
|
|
|
|
|
|
in your message. Do not leave out any information that appears to
|
|
|
|
|
|
be correct, or was mentioned in a previous post. There have been
|
|
|
|
|
|
countless posts by people who were sure that some part of their
|
|
|
|
|
|
configuration was correct when it actually contained a small error.
|
|
|
|
|
|
We tend to be skeptics where detail is lacking.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>Please keep in mind that you're asking for
|
|
|
|
|
|
<strong>free</strong> technical support. Any help we offer
|
|
|
|
|
|
is an act of generosity, not an obligation. Try to make it easy
|
|
|
|
|
|
for us to help you. Follow good, courteous practices in writing
|
|
|
|
|
|
and formatting your e-mail. Provide details that we need if you expect
|
|
|
|
|
|
good answers. <em>Exact quoting </em> of error messages, log entries,
|
|
|
|
|
|
command output, and other output is better than a paraphrase or summary.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li> Please don't
|
|
|
|
|
|
describe your environment and then ask us to send you
|
|
|
|
|
|
custom configuration files. We're here to answer your
|
|
|
|
|
|
questions but we can't do your job for you.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>When reporting a problem, <strong>ALWAYS</strong>
|
|
|
|
|
|
include this information:</li>
|
|
|
|
|
|
|
2002-08-22 23:33:54 +02:00
|
|
|
|
</ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 21:32:45 +01:00
|
|
|
|
<ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
<li>the exact version of Shorewall you are running.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<b><font color="#009900">shorewall version</font><br>
|
|
|
|
|
|
</b> <br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 21:32:45 +01:00
|
|
|
|
</ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 21:32:45 +01:00
|
|
|
|
<ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
<li>the exact kernel version you are running<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<font color="#009900"><b>uname -a<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</b></font></li>
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 21:32:45 +01:00
|
|
|
|
</ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 21:32:45 +01:00
|
|
|
|
<ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
<li>the complete, exact output of<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<font color="#009900"><b>ip addr show<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</b></font></li>
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 21:32:45 +01:00
|
|
|
|
</ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 21:32:45 +01:00
|
|
|
|
<ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
<li>the complete, exact output of<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<font color="#009900"><b>ip route show<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</b></font></li>
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 21:32:45 +01:00
|
|
|
|
</ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 21:32:45 +01:00
|
|
|
|
<ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
<li>If your kernel is modularized, the exact
|
|
|
|
|
|
output from<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<font color="#009900"><b>lsmod</b></font><br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>the exact wording of any <code
|
2003-02-08 21:48:47 +01:00
|
|
|
|
style="color: green; font-weight: bold;">ping</code> failure responses<br>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>If you installed Shorewall using one of the QuickStart
|
|
|
|
|
|
Guides, please indicate which one. <br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li><b>If you are running Shorewall under Mandrake using
|
|
|
|
|
|
the Mandrake installation of Shorewall, please say so.</b><br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-01-14 21:32:45 +01:00
|
|
|
|
</ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
</ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
2003-01-14 21:32:45 +01:00
|
|
|
|
<ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
<li><b>NEVER </b>include the output of "<b><font
|
2003-02-25 20:26:18 +01:00
|
|
|
|
color="#009900">iptables -L</font></b>". Instead,<font
|
2003-03-08 16:48:57 +01:00
|
|
|
|
color="#ff0000"><u><i><big> <b>if you are having connection problems of
|
2003-03-18 16:16:33 +01:00
|
|
|
|
any kind then:</b></big></i></u></font><br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
1. <b><font color="#009900">/sbin/shorewall/reset</font></b><br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
2. Try the connection that is failing.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
3.<b><font color="#009900"> /sbin/shorewall status > /tmp/status.txt</font></b><br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
4. Post the /tmp/status.txt file as an attachment.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>As a general
|
|
|
|
|
|
matter, please <strong>do not edit the diagnostic information</strong>
|
|
|
|
|
|
in an attempt to conceal your IP address, netmask, nameserver addresses,
|
|
|
|
|
|
domain name, etc. These aren't secrets, and concealing them often
|
|
|
|
|
|
misleads us (and 80% of the time, a hacker could derive them anyway
|
|
|
|
|
|
from information contained in the SMTP headers of your post).<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<strong></strong></li>
|
|
|
|
|
|
<li>Do you see any "Shorewall" messages ("<b><font
|
|
|
|
|
|
color="#009900">/sbin/shorewall show log</font></b>") when
|
|
|
|
|
|
you exercise the function that is giving you problems? If so, include
|
|
|
|
|
|
the message(s) in your post along with a copy of your /etc/shorewall/interfaces
|
|
|
|
|
|
file.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>Please include any of the Shorewall configuration files
|
|
|
|
|
|
(especially the /etc/shorewall/hosts file if you have
|
|
|
|
|
|
modified that file) that you think are relevant. If you
|
|
|
|
|
|
include /etc/shorewall/rules, please include /etc/shorewall/policy
|
|
|
|
|
|
as well (rules are meaningless unless one also knows the policies).<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>If an error occurs when you try to "<font
|
|
|
|
|
|
color="#009900"><b>shorewall start</b></font>", include a
|
|
|
|
|
|
trace (See the <a href="troubleshoot.htm">Troubleshooting</a>
|
|
|
|
|
|
section for instructions).<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li><b>The list server limits posts to 120kb so don't post GIFs
|
|
|
|
|
|
of your network layout, etc. to the Mailing
|
|
|
|
|
|
List -- your post will be rejected.</b></li>
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
</ul>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
<blockquote>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
The author gratefully acknowleges that the above list was heavily
|
|
|
|
|
|
plagiarized from the excellent LEAF document by <i>Ray</i> <em>Olszewski</em>
|
|
|
|
|
|
found at <a
|
2003-02-08 21:48:47 +01:00
|
|
|
|
href="http://leaf-project.org/pub/doc/docmanager/docid_1891.html">http://leaf-project.org/pub/doc/docmanager/docid_1891.html</a>.<br>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
</blockquote>
|
|
|
|
|
|
|
|
|
|
|
|
<h2>When using the mailing list, please post in plain text</h2>
|
|
|
|
|
|
|
|
|
|
|
|
<blockquote>
|
|
|
|
|
|
A growing number of MTAs serving list subscribers are rejecting
|
|
|
|
|
|
all HTML traffic. At least one MTA has gone so far as to blacklist
|
|
|
|
|
|
shorewall.net "for continuous abuse" because it has been my policy
|
|
|
|
|
|
to allow HTML in list posts!!<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
I think that blocking all HTML is a Draconian
|
|
|
|
|
|
way to control spam and that the ultimate losers here are not
|
|
|
|
|
|
the spammers but the list subscribers whose MTAs are bouncing
|
|
|
|
|
|
all shorewall.net mail. As one list subscriber wrote to me privately
|
|
|
|
|
|
"These e-mail admin's need to get a <i>(expletive deleted)</i> life
|
|
|
|
|
|
instead of trying to rid the planet of HTML based e-mail". Nevertheless,
|
|
|
|
|
|
to allow subscribers to receive list posts as must as possible, I have
|
|
|
|
|
|
now configured the list server at shorewall.net to strip all HTML
|
|
|
|
|
|
from outgoing posts.<br>
|
|
|
|
|
|
</blockquote>
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h2>Where to Send your Problem Report or to Ask for Help</h2>
|
2003-03-08 16:48:57 +01:00
|
|
|
|
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
2003-03-08 16:48:57 +01:00
|
|
|
|
<blockquote>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h4>If you run Shorewall under Bering -- <span
|
2003-03-08 16:48:57 +01:00
|
|
|
|
style="font-weight: 400;">please post your question or problem
|
2003-03-18 16:16:33 +01:00
|
|
|
|
to the <a href="mailto:leaf-user@lists.sourceforge.net">LEAF
|
|
|
|
|
|
Users mailing list</a>.</span></h4>
|
|
|
|
|
|
<b>If you run Shorewall under MandrakeSoft Multi
|
|
|
|
|
|
Network Firewall (MNF) and you have not purchased an MNF license
|
|
|
|
|
|
from MandrakeSoft then you can post non MNF-specific Shorewall questions
|
|
|
|
|
|
to the </b><a href="mailto:shorewall-users@lists.shorewall.net">Shorewall
|
|
|
|
|
|
users mailing list</a>. <b>Do not expect to get free MNF support
|
|
|
|
|
|
on the list or forum.</b><br>
|
2003-03-08 16:48:57 +01:00
|
|
|
|
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<p>Otherwise, please post your question or problem to the <a
|
2003-03-08 16:48:57 +01:00
|
|
|
|
href="mailto:shorewall-users@lists.shorewall.net">Shorewall users mailing
|
2003-03-18 16:16:33 +01:00
|
|
|
|
list</a>.</p>
|
|
|
|
|
|
</blockquote>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-02-14 22:27:03 +01:00
|
|
|
|
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
<p>To Subscribe to the mailing list go to <a
|
|
|
|
|
|
href="http://lists.shorewall.net/mailman/listinfo/shorewall-users">http://lists.shorewall.net/mailman/listinfo/shorewall-users</a>
|
|
|
|
|
|
.<br>
|
|
|
|
|
|
</p>
|
|
|
|
|
|
|
|
|
|
|
|
<p>For information on other Shorewall mailing lists, go to <a
|
|
|
|
|
|
href="http://lists.shorewall.net/mailing_list.htm">http://lists.shorewall.net/mailing_list.htm</a><br>
|
|
|
|
|
|
</p>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
|
|
|
|
|
<p align="left"><font size="2">Last Updated 3/14/2003 - Tom Eastep</font></p>
|
2003-03-08 16:48:57 +01:00
|
|
|
|
|
2003-03-18 16:16:33 +01:00
|
|
|
|
|
2002-09-16 19:02:45 +02:00
|
|
|
|
<p align="left"><font face="Trebuchet MS"><a href="copyright.htm"> <font
|
2003-01-14 21:32:45 +01:00
|
|
|
|
size="2">Copyright</font> <20> <font size="2">2001, 2002, 2003 Thomas M. Eastep.</font></a></font><br>
|
2003-03-08 16:48:57 +01:00
|
|
|
|
</p>
|
2003-03-18 16:16:33 +01:00
|
|
|
|
<br>
|
2003-02-08 21:48:47 +01:00
|
|
|
|
<br>
|
2002-08-22 23:33:54 +02:00
|
|
|
|
</body>
|
2002-09-16 19:02:45 +02:00
|
|
|
|
</html>
|
