Tom Eastep
Copyright © 2001-2006 Thomas
M. Eastep
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the license is included in the section entitled “GNU Free Documentation License”.
2006-06-07
Package Information
Finding
Updates that Correct Known Problems
Download
Sites
SVN
Before trying to install, I strongly urge you to read and print a copy of the Shorewall QuickStart Guide for the configuration that most closely matches your own.
The entire set of Shorewall documentation is available in PDF format at:
ftp://slovakia.shorewall.net/mirror/shorewall/pdf/
http://slovakia.shorewall.net/pub/shorewall/pdf/
rsync://slovakia.shorewall.net/shorewall/pdf/
The documentation in both XML and HTML formats is also available for download from the Download Sites listed in the table below.
NOTICE: There are two current Shorewall Release Series:
The STABLE release series is 3.0. Choose this release if you value stability and good documentation.
The DEVELOPMENT release series is 3.2 (found in the 'development' directory). Choose this release if you are very experienced user and you are willing to help and report bugs. THIS VERSION IS EXPERIMENTAL AND IS NOT SUPPORTED.
For additional information, see this article about the Shorewall Release Model.
Once you've printed the appropriate QuickStart Guide, download one of the modules:
Simon Matter provides RPMs tailored for Redhat and Fedora. You can download them from his site.
Jack Coates provides RPMs tailored for Mandriva. You can download them from his site.
jmedina provides packages for Slackware. You can download them from his site.
Fabio Longarai provides a package for OpenWRT (Open firmware for Linksys® WRT54G). You can download it from his site.
jMCg provides a package for Arch Linux. You can download it from the Arch Linux site.
If you run a SUSE, Linux PPC, Trustix or TurboLinux distribution with a 2.4 or 2.6 kernel, you can use the standard RPM version (note: the RPM should also work with other distributions that store init scripts in /etc/init.d and that include chkconfig or insserv). If you find that it works in other cases, let me know so that I can mention them here (Note: the standard RPM is known to work on Redhat, Fedora and Mandriva with issues ranging from trivial (Redhat and Fedora) to moderate (Mandriva)). See the Installation Instructions if you have problems installing the RPM.
If you run Debian and would like a .deb package, Shorewall is included in both the Debian Testing Branch and the Debian Unstable Branch.
If you run LEAF/Bering or one if it's
derivatives, you can download a .lrp file from the Leaf site.
From the LEAF Bering-uClibc Team: We try to provide the latest stable
version shortly after release, but we also want to do some internal
tests before making it available. So we may be
behind sometimes. But better be sure that the new version is running on
LEAF, than being too fast...
I know it's not obvious for newbies where to find the lrp on our pages.
shorewall.lrp is part of the packages page:
http://leaf.sourceforge.net/bering-uclibc/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=3&MMN_position=3:3
which itself links to cvs:
http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/leaf/bin/bering-uclibc/packages/shorwall.lrp?rev=HEAD&content-type=application/octet-stream
Otherwise, download the shorewall module (.tgz)
You will probably also want to download the HTML version of the documentation for easy reference.
Beginning with Shorewall 2.2.0, you will find a file named known_problems.txt in the download directory. This file lists the known problems with that version of Shorewall. If corrections are available, they will be listed in the known problems and you can download them from the 'errata' subdirectory.
Example:
ftp> cd
pub/shorewall/2.2/shorewall-2.2.0
250
OK. Current directory is /pub/shorewall/2.2/shorewall-2.2.0
ftp>
ls
227 Entering Passive Mode
(206,124,146,177,35,91)
150 Accepted
data connection
drwxr-sr-x
3 0
0
4096 Feb 1 09:52 .
drwxr-sr-x
3 0
0
4096 Jan 28 14:28 ..
-rw-r--r--
1 0
0
500 Jan 28 14:27 2.2.0.md5sums
drwxr-sr-x
2 0
0
4096 Feb 1 09:51
errata
<=== (1)
-rw-r--r--
1 0
0
156 Feb 1 09:52 known_problems.txt <=== (2)
-rw-r--r--
1 0
0
16059 Jan 24 16:13 patch-2.2.0
-rwxr-xr-x
1 0
0
22963 Jan 24 16:10 releasenotes.txt
-rw-r--r--
1 0
0
100232 Jan 25 15:58 shorewall-2.2.0-1.noarch.rpm
-rw-r--r--
1 0
0
122161 Jan 25 15:58 shorewall-2.2.0.tgz
-rw-r--r--
1 0
0
2534077 Jan 28 13:29 shorewall-docs-html-2.2.0.tgz
-rw-r--r--
1 0
0
4481205 Jan 28 13:29 shorewall-docs-xml-2.2.0.tgz
-rw-r--r--
1 0
0
93905 Jan 25 15:58 shorewall-lrp-2.2.0.tgz
226-Options:
-a -l
226 13 matches total
ftp>
(1)
Directory containing updates. For Shorewall versions prior to 2.4.0,
the updates/LRP directory contains those updates that apply to the
LRP package.
(2) List of known
problems, workarounds and updates..
Redhat and Fedora RPMS
provided by Simon Matter:
http://www.invoca.ch/pub/packages/shorewall/
Mandriva
RPMS provided by Jack Coates:
http://www.monkeynoodle.org/comp/net/shorewall/
Slackware
packages created by JMedina. You can download
them from his site.
OpenWRT package provided by
Marc Zonzon:
http://www.iut-lannion.fr/ZONZON/memos_index.php?part=Network§ion=WRTMemo&subsec=shorewall
Leaf/Bering
package is available at
http://leaf.sourceforge.net/bering-uclibc/index.php?module=pagemaster&PAGE_user_op=view_page&PAGE_id=3&MMN_position=3:3
Use
the sites below to download thetarball, the documentation
and the standard RPM for (Suse, Power PPC,
Trustix and TurboLinux).
Packages are GPG
signed, please verify the integrity of the files using our
public key https://lists.shorewall.net/shorewall.gpg.key
|
SERVER LOCATION |
DOMAIN |
HTTP |
FTP |
|
Slovak Republic |
Shorewall.net |
||
|
Vienna, Va, USA |
Shorewall.net |
||
|
Frankfurt/Main, Germany |
Shorewall.de |
N/A |
|
|
Shoreline, Wa, USA |
Shorewall.net |
||
|
Boston, Mass., USA |
viisage.com |
N/A |
|
|
Austin Texas, USA |
shorewall.net |
||
|
Plano Texas, USA |
Infohiiway.com |
||
|
Argentina |
Shorewall.net |
||
|
Sourceforge - California, USA (Incomplete) |
Sourceforge.net |
N/A |
The SVN Repository at Sourceforge is used as a safe-store for Shorewall releases.
You should download and use the latest SVN version only at your own risk -- If you are looking for bug fixes for the current release, see above.
The following SVN projects are currently active:
Shorewall
This project contains the Shorewall code.
"trunk" is the current development version.
You can download it using the following commands:
# svn co https://svn.sourceforge.net/svnroot/shorewall/trunk/Shorewall
The current stable version is branch named x.y where x.y is the major version. Example: 3.0.
You can download it using the following commands:
# svn co https://svn.sourceforge.net/svnroot/shorewall/branches/x.y/Shorewall
docs
This project contains the Shorewall documenation.
trunk is the current development version.
You can always get the current documentation in XML Docbook format using the following command:
#svn co https://svn.sourceforge.net/svnroot/shorewall/trunk/docs
web
The project contains the part of this Web site not included in the "docs" project.
tools
This project includes the tools used by the Shorewall developers to build Shorewall releases and to publish content to the web sites.
Samples
This project contains the sample configurations.
Shorewall-lite
This project contains Shorewall Lite -- introduced in Shorewall version 3.2.0 RC1.