2002-09-16 19:13:10 +02:00
|
|
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
2002-08-13 22:45:21 +02:00
|
|
|
|
<html>
|
|
|
|
|
|
<head>
|
2002-09-16 19:13:10 +02:00
|
|
|
|
<meta http-equiv="Content-Language" content="en-us">
|
|
|
|
|
|
<meta http-equiv="Content-Type"
|
|
|
|
|
|
content="text/html; charset=windows-1252">
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<title>Shorewall Support Guide</title>
|
2002-08-13 22:45:21 +02:00
|
|
|
|
</head>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<body>
|
2003-12-03 00:51:46 +01:00
|
|
|
|
<h1 align="center" style="background-color: rgb(255, 255, 255);">Shorewall
|
|
|
|
|
|
Support Guide <font><font color="#ffffff"><img
|
|
|
|
|
|
src="images/obrasinf.gif" alt=""
|
|
|
|
|
|
style="width: 90px; height: 90px; color: rgb(51, 0, 51);"
|
|
|
|
|
|
align="middle" title=""></font></font></h1>
|
2003-03-18 02:13:38 +01:00
|
|
|
|
<h2>Before Reporting a Problem or Asking a Question<br>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
</h2>
|
|
|
|
|
|
There are a number of sources of Shorewall information. Please try
|
|
|
|
|
|
these before you post.
|
2002-08-13 22:45:21 +02:00
|
|
|
|
<ul>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<li>Shorewall versions earlier that 1.3.0 are no longer supported.<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>More than half of the questions posted on the support list have
|
|
|
|
|
|
answers directly accessible from the <a
|
2003-12-03 00:51:46 +01:00
|
|
|
|
href="shorewall_quickstart_guide.htm#Documentation">Documentation
|
2003-10-07 00:38:40 +02:00
|
|
|
|
Index</a><br>
|
|
|
|
|
|
</li>
|
2003-12-03 00:51:46 +01:00
|
|
|
|
<li> The <a href="FAQ.htm">FAQ</a> has
|
2003-10-07 00:38:40 +02:00
|
|
|
|
solutions to more than 20 common problems. </li>
|
2003-12-03 00:51:46 +01:00
|
|
|
|
<li> The <a href="troubleshoot.htm">Troubleshooting</a>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
Information contains a number of tips
|
|
|
|
|
|
to help you solve common problems. </li>
|
2003-12-03 00:51:46 +01:00
|
|
|
|
<li> The <a href="errata.htm"> Errata</a>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
has links to download updated components. </li>
|
|
|
|
|
|
<li> The Site and Mailing List Archives search facility can locate
|
|
|
|
|
|
documents and posts about similar problems: </li>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
</ul>
|
2003-03-18 02:13:38 +01:00
|
|
|
|
<h2>Site and Mailing List Archive Search</h2>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<blockquote>
|
2003-03-18 02:13:38 +01:00
|
|
|
|
<form method="post"
|
2003-10-07 00:38:40 +02:00
|
|
|
|
action="http://lists.shorewall.net/cgi-bin/htsearch"> <font size="-1">Match:
|
2003-03-18 02:13:38 +01:00
|
|
|
|
<select name="method">
|
|
|
|
|
|
<option value="and">All </option>
|
|
|
|
|
|
<option value="or">Any </option>
|
|
|
|
|
|
<option value="boolean">Boolean </option>
|
|
|
|
|
|
</select>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
Format:
|
2003-03-18 02:13:38 +01:00
|
|
|
|
<select name="format">
|
|
|
|
|
|
<option value="builtin-long">Long </option>
|
|
|
|
|
|
<option value="builtin-short">Short </option>
|
|
|
|
|
|
</select>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
Sort by:
|
2003-03-18 02:13:38 +01:00
|
|
|
|
<select name="sort">
|
|
|
|
|
|
<option value="score">Score </option>
|
|
|
|
|
|
<option value="time">Time </option>
|
|
|
|
|
|
<option value="title">Title </option>
|
|
|
|
|
|
<option value="revscore">Reverse Score </option>
|
|
|
|
|
|
<option value="revtime">Reverse Time </option>
|
|
|
|
|
|
<option value="revtitle">Reverse Title </option>
|
|
|
|
|
|
</select>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
</font><input type="hidden" name="config" value="htdig"><input
|
|
|
|
|
|
type="hidden" name="restrict" value=""><font size="-1"> Include
|
|
|
|
|
|
Mailing List Archives:
|
2003-03-18 02:13:38 +01:00
|
|
|
|
<select size="1" name="exclude">
|
|
|
|
|
|
<option value="">Yes</option>
|
|
|
|
|
|
<option value="[http://lists.shorewall.net/pipermail/.*]">No</option>
|
|
|
|
|
|
</select>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
</font><br>
|
|
|
|
|
|
Search: <input type="text" size="30" name="words" value=""> <input
|
|
|
|
|
|
type="submit" value="Search"><br>
|
|
|
|
|
|
</form>
|
|
|
|
|
|
</blockquote>
|
2003-03-18 02:13:38 +01:00
|
|
|
|
<h2>Problem Reporting Guidelines<br>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
</h2>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<ul>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<li>Please remember we only know what is posted in your message. Do
|
|
|
|
|
|
not leave out
|
|
|
|
|
|
any information that appears to be correct, or was mentioned in a
|
|
|
|
|
|
previous post. There have been countless posts by people who were sure
|
|
|
|
|
|
that some part of their configuration was correct when it actually
|
|
|
|
|
|
contained a small error. We tend to be skeptics where detail is lacking.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>Please keep in mind that you're asking for <strong>free</strong>
|
|
|
|
|
|
technical support. Any help we offer is an act of generosity, not an
|
|
|
|
|
|
obligation. Try to make it easy for us to help you. Follow good,
|
|
|
|
|
|
courteous practices in writing and formatting your e-mail. Provide
|
|
|
|
|
|
details
|
|
|
|
|
|
that we need if you expect good answers. <em>Exact quoting </em> of
|
|
|
|
|
|
error messages, log entries, command output, and other output is
|
|
|
|
|
|
better than a paraphrase or summary.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
2003-12-03 00:51:46 +01:00
|
|
|
|
<li>Please don't describe your problem as "Computer A can't see
|
|
|
|
|
|
Computer B". Of course it can't -- it hasn't any eyes! If ping from A
|
|
|
|
|
|
to B fails, say so (and see below for information about reporting
|
|
|
|
|
|
'ping' problems). If Computer B doesn't show up in "Network
|
|
|
|
|
|
Neighborhood" then say so. <br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
2003-12-04 23:36:23 +01:00
|
|
|
|
<li>Please give details about what doesn't work. Reports that say "I
|
|
|
|
|
|
followed the directions and it didn't work" will elicit sympathy but
|
|
|
|
|
|
probably little in the way of help. Again -- if ping from A
|
|
|
|
|
|
to B fails, say so (and see below for information about reporting
|
|
|
|
|
|
'ping' problems). If Computer B doesn't show up in "Network
|
|
|
|
|
|
Neighborhood" then say so. If access by IP address works but by DNS
|
|
|
|
|
|
names it doesn't then say so.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<li> Please don't describe your environment and then ask us to send
|
|
|
|
|
|
you custom configuration files. We're here to answer your questions but
|
|
|
|
|
|
we can't do your job for you.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>When reporting a problem, <strong>ALWAYS</strong> include this
|
|
|
|
|
|
information:</li>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
</ul>
|
|
|
|
|
|
<ul>
|
2003-01-14 18:18:42 +01:00
|
|
|
|
<ul>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<li>the exact version of Shorewall you are running.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<b><font color="#009900">shorewall version</font><br>
|
|
|
|
|
|
</b> <br>
|
|
|
|
|
|
</li>
|
2003-01-14 18:18:42 +01:00
|
|
|
|
</ul>
|
|
|
|
|
|
<ul>
|
|
|
|
|
|
</ul>
|
|
|
|
|
|
<ul>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<li>the complete, exact
|
|
|
|
|
|
output of<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<font color="#009900"><b>ip addr show<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</b></font></li>
|
2003-01-14 18:18:42 +01:00
|
|
|
|
</ul>
|
|
|
|
|
|
<ul>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<li>the complete, exact
|
|
|
|
|
|
output of<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<font color="#009900"><b>ip route show<br>
|
|
|
|
|
|
</b></font></li>
|
2003-01-14 18:18:42 +01:00
|
|
|
|
</ul>
|
|
|
|
|
|
<ul>
|
|
|
|
|
|
</ul>
|
|
|
|
|
|
</ul>
|
|
|
|
|
|
<ul>
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<ul>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<li><small><small><font color="#ff0000"><u><i><big><b>THIS
|
|
|
|
|
|
IS IMPORTANT!</b></big></i></u></font></small></small><big> </big>If
|
|
|
|
|
|
your
|
|
|
|
|
|
problem is that some type of connection to/from or through your
|
|
|
|
|
|
firewall
|
|
|
|
|
|
isn't working then please perform the following four steps:<br>
|
|
|
|
|
|
<br>
|
2003-12-03 00:51:46 +01:00
|
|
|
|
1. <b><font color="#009900"><span style="color: rgb(0, 0, 0);">If
|
|
|
|
|
|
shorewall isn't running then </span></font></b><font color="#009900"
|
|
|
|
|
|
style="font-weight: bold; color: rgb(0, 153, 0);">/sbin/shorewall/start</font><b><font
|
|
|
|
|
|
color="#009900"><span style="color: rgb(0, 0, 0);">. Otherwise</span>
|
|
|
|
|
|
/sbin/shorewall reset<span style="color: rgb(0, 0, 0);">.</span></font></b><br>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<br>
|
|
|
|
|
|
2. Try making the connection that is failing.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
3.<b><font color="#009900"> /sbin/shorewall status > /tmp/status.txt</font></b><br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
4. Post the /tmp/status.txt file as an
|
|
|
|
|
|
attachment (you may compress it if you like).<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>the exact wording of any <code
|
2003-04-13 17:28:32 +02:00
|
|
|
|
style="color: green; font-weight: bold;">ping</code> failure responses<br>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>If you installed Shorewall using one of the QuickStart Guides,
|
|
|
|
|
|
please indicate which one. <br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li><b>If you are running Shorewall under Mandrake
|
|
|
|
|
|
using the Mandrake installation of Shorewall, please say so.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</b></li>
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</ul>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<li>As a general matter, please <strong>do not edit the diagnostic
|
|
|
|
|
|
information</strong> in an attempt to conceal your IP address, netmask,
|
|
|
|
|
|
nameserver addresses, domain name, etc. These aren't secrets, and
|
|
|
|
|
|
concealing them often misleads us (and 80% of the time, a hacker could
|
|
|
|
|
|
derive them anyway from information contained in the SMTP headers of
|
|
|
|
|
|
your post).<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<strong></strong></li>
|
|
|
|
|
|
<li>Do you see any "Shorewall" messages ("<b><font color="#009900">/sbin/shorewall
|
|
|
|
|
|
show log</font></b>") when you exercise the function that is giving you
|
|
|
|
|
|
problems? If so, include the message(s) in your post along with a copy
|
|
|
|
|
|
of your /etc/shorewall/interfaces file.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>Please include any of the Shorewall configuration files
|
|
|
|
|
|
(especially the /etc/shorewall/hosts file if you have modified that
|
|
|
|
|
|
file) that you think are relevant. If you include /etc/shorewall/rules,
|
|
|
|
|
|
please include /etc/shorewall/policy as well (rules are meaningless
|
|
|
|
|
|
unless one also knows the policies).<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li>If an error occurs when you try to "<font color="#009900"><b>shorewall
|
2003-12-04 23:36:23 +01:00
|
|
|
|
start</b></font>", include a trace (See the <a href="troubleshoot.htm">Troubleshooting</a>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
section for instructions).<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</li>
|
|
|
|
|
|
<li><b>The list server limits posts to 120kb so don't post GIFs of
|
|
|
|
|
|
your network
|
|
|
|
|
|
layout, etc. to the Mailing List -- your post will be
|
2003-07-16 20:59:33 +02:00
|
|
|
|
rejected.</b></li>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
</ul>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<blockquote> The author gratefully acknowleges that the above list was
|
|
|
|
|
|
heavily plagiarized from the excellent LEAF document by <i>Ray</i> <em>Olszewski</em>
|
|
|
|
|
|
found at <a
|
2003-01-22 01:37:23 +01:00
|
|
|
|
href="http://leaf-project.org/pub/doc/docmanager/docid_1891.html">http://leaf-project.org/pub/doc/docmanager/docid_1891.html</a>.<br>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
</blockquote>
|
2003-05-28 21:20:23 +02:00
|
|
|
|
<h2>When using the mailing list, please post in plain text</h2>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<blockquote> A growing number of MTAs serving list subscribers are
|
|
|
|
|
|
rejecting all HTML traffic. At least one MTA has gone so far as to
|
|
|
|
|
|
blacklist shorewall.net "for continuous abuse" because it has been
|
|
|
|
|
|
my policy to allow HTML in list posts!!<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
I think that blocking all HTML is a Draconian way to control spam and
|
|
|
|
|
|
that the ultimate losers here are not the spammers but the list
|
|
|
|
|
|
subscribers whose MTAs are bouncing all shorewall.net mail. As one list
|
|
|
|
|
|
subscriber wrote to me privately "These e-mail admin's need to get a <i>(expletive
|
|
|
|
|
|
deleted)</i> life instead of trying to rid the planet of HTML based
|
|
|
|
|
|
e-mail". Nevertheless, to allow
|
|
|
|
|
|
subscribers to receive list posts as must as possible, I have now
|
|
|
|
|
|
configured the list server at shorewall.net to convert all HTML to
|
|
|
|
|
|
plain text. These converted posts are difficult to read so all of us
|
|
|
|
|
|
will appreciate it if you just post in plain text to begin with.<br>
|
|
|
|
|
|
</blockquote>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h2>Where to Send your Problem Report or to Ask for Help</h2>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<blockquote>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h4>If you run Shorewall under Bering -- <span
|
2003-10-07 00:38:40 +02:00
|
|
|
|
style="font-weight: 400;">please post your question or problem to the <a
|
|
|
|
|
|
href="mailto:leaf-user@lists.sourceforge.net">LEAF Users mailing list</a>.</span></h4>
|
2003-12-04 23:36:23 +01:00
|
|
|
|
<span style="font-weight: bold;">If you are new to Shorewall and have
|
|
|
|
|
|
a question or need help with a problem, </span>please post to the <a
|
|
|
|
|
|
href="mailto:shorewall-newbies@lists.shorewall.net">Shorewall Newbies
|
|
|
|
|
|
mailing list</a>.<span style="font-weight: bold;"><br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
</span> <b>If you run Shorewall under MandrakeSoft Multi Network
|
|
|
|
|
|
Firewall
|
2003-10-07 00:38:40 +02:00
|
|
|
|
(MNF) and you have not purchased an MNF license from MandrakeSoft then
|
|
|
|
|
|
you can post non MNF-specific Shorewall questions to the </b><a
|
|
|
|
|
|
href="mailto:shorewall-users@lists.shorewall.net">Shorewall users
|
|
|
|
|
|
mailing list</a>. <b>Do not expect to get free MNF support on the list</b>
|
2003-07-04 18:41:22 +02:00
|
|
|
|
<p>Otherwise, please post your question or problem to the <a
|
2003-10-07 00:38:40 +02:00
|
|
|
|
href="mailto:shorewall-users@lists.shorewall.net">Shorewall users
|
2003-12-03 00:51:46 +01:00
|
|
|
|
mailing list.</a><span style="font-weight: bold;"> IMPORTANT: </span>If
|
|
|
|
|
|
you are not subscribed to the list, please say so -- otherwise, you
|
|
|
|
|
|
will not be included in any replies.<br>
|
|
|
|
|
|
</p>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
</blockquote>
|
2003-12-04 23:36:23 +01:00
|
|
|
|
<h2>Subscribing to the Newbies Mailing List<br>
|
|
|
|
|
|
</h2>
|
|
|
|
|
|
To Subscribe to the mailing list go to <a
|
|
|
|
|
|
href="https://lists.shorewall.net/mailman/listinfo/shorewall-newbies"
|
|
|
|
|
|
target="_top">https//lists.shorewall.net/mailman/listinfo/shorewall-newbies</a>.
|
2003-08-09 19:14:58 +02:00
|
|
|
|
<h2>Subscribing to the Users Mailing List<br>
|
|
|
|
|
|
</h2>
|
|
|
|
|
|
<blockquote>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
<p> To Subscribe to the mailing list go to <a
|
2003-08-09 19:14:58 +02:00
|
|
|
|
href="https://lists.shorewall.net/mailman/listinfo/shorewall-users"
|
|
|
|
|
|
target="_top">https//lists.shorewall.net/mailman/listinfo/shorewall-users</a>.<br>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
</p>
|
|
|
|
|
|
</blockquote>
|
2003-03-18 02:13:38 +01:00
|
|
|
|
<p>For information on other Shorewall mailing lists, go to <a
|
2003-05-15 21:39:23 +02:00
|
|
|
|
href="http://lists.shorewall.net">http://lists.shorewall.net</a><br>
|
2003-10-07 00:38:40 +02:00
|
|
|
|
</p>
|
2003-12-04 23:36:23 +01:00
|
|
|
|
<p align="left"><font size="2">Last Updated 12/02/2003 - Tom Eastep</font></p>
|
2002-09-16 19:13:10 +02:00
|
|
|
|
<p align="left"><font face="Trebuchet MS"><a href="copyright.htm"> <font
|
2003-10-07 00:38:40 +02:00
|
|
|
|
size="2">Copyright</font> <20> <font size="2">2001, 2002, 2003 Thomas M.
|
|
|
|
|
|
Eastep.</font></a></font><br>
|
|
|
|
|
|
</p>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<br>
|
2002-08-13 22:45:21 +02:00
|
|
|
|
</body>
|
2002-09-16 19:13:10 +02:00
|
|
|
|
</html>
|
