2002-11-09 22:34:47 +01:00
|
|
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
|
|
|
|
<html>
|
|
|
|
|
|
<head>
|
|
|
|
|
|
<meta http-equiv="Content-Type"
|
|
|
|
|
|
content="text/html; charset=windows-1252">
|
2003-03-18 02:13:38 +01:00
|
|
|
|
<title>Shoreline Firewall (Shorewall) 1.3</title>
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<base target="_self">
|
2002-11-09 22:34:47 +01:00
|
|
|
|
</head>
|
|
|
|
|
|
<body>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2002-11-09 22:34:47 +01:00
|
|
|
|
<table border="0" cellpadding="0" cellspacing="4"
|
|
|
|
|
|
style="border-collapse: collapse;" width="100%" id="AutoNumber3"
|
|
|
|
|
|
bgcolor="#4b017c">
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<tbody>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<tr>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<td width="100%"
|
2003-03-23 19:47:54 +01:00
|
|
|
|
height="90">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-11-09 22:34:47 +01:00
|
|
|
|
<h1 align="center"> <font size="4"><i> <a
|
|
|
|
|
|
href="http://www.cityofshoreline.com"> <img vspace="4" hspace="4"
|
|
|
|
|
|
alt="Shorwall Logo" height="70" width="85" align="left"
|
|
|
|
|
|
src="images/washington.jpg" border="0">
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</a></i></font><font
|
2003-03-18 02:13:38 +01:00
|
|
|
|
color="#ffffff">Shorewall 1.4 - <font
|
|
|
|
|
|
size="4">"<i>iptables made easy"</i></font></font><a
|
2003-02-20 00:21:55 +01:00
|
|
|
|
href="http://www.sf.net"> </a></h1>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-02-20 00:21:55 +01:00
|
|
|
|
<div align="center"><a href="/1.3/index.html" target="_top"><font
|
|
|
|
|
|
color="#ffffff">Shorewall 1.3 Site here</font></a></div>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</td>
|
|
|
|
|
|
</tr>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</tbody>
|
|
|
|
|
|
|
2002-11-09 22:34:47 +01:00
|
|
|
|
</table>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<div align="center">
|
|
|
|
|
|
|
|
|
|
|
|
<center>
|
|
|
|
|
|
|
2002-11-09 22:34:47 +01:00
|
|
|
|
<table border="0" cellpadding="0" cellspacing="0"
|
|
|
|
|
|
style="border-collapse: collapse;" width="100%" id="AutoNumber4">
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<tbody>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<tr>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<td width="90%">
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h2 align="left">What is it?</h2>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<p>The Shoreline Firewall, more commonly known as<61> "Shorewall", is
|
|
|
|
|
|
a <a href="http://www.netfilter.org">Netfilter</a> (iptables)
|
|
|
|
|
|
based firewall that can be used on a dedicated firewall
|
|
|
|
|
|
system, a multi-function gateway/router/server or on a standalone
|
|
|
|
|
|
GNU/Linux system.</p>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
<p>This program is free software; you can redistribute it and/or modify
|
2003-03-22 01:25:40 +01:00
|
|
|
|
it under the
|
|
|
|
|
|
terms of <a href="http://www.gnu.org/licenses/gpl.html">Version
|
|
|
|
|
|
2 of the GNU General Public License</a> as published by the Free
|
|
|
|
|
|
Software Foundation.<br>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<br>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
This program is distributed
|
|
|
|
|
|
in the hope that it will be useful, but
|
|
|
|
|
|
WITHOUT ANY WARRANTY; without even the implied
|
|
|
|
|
|
warranty of MERCHANTABILITY or FITNESS FOR
|
2003-03-23 19:47:54 +01:00
|
|
|
|
A PARTICULAR PURPOSE. See the GNU General Public
|
2003-03-22 01:25:40 +01:00
|
|
|
|
License for more details.<br>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<br>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
You should have received
|
2003-03-22 01:25:40 +01:00
|
|
|
|
a copy of the GNU General Public License
|
|
|
|
|
|
along with this program; if not, write
|
|
|
|
|
|
to the Free Software Foundation, Inc., 675
|
|
|
|
|
|
Mass Ave, Cambridge, MA 02139, USA</p>
|
2003-01-14 18:18:42 +01:00
|
|
|
|
<p><a href="copyright.htm">Copyright 2001, 2002, 2003 Thomas M. Eastep</a></p>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<p> <a href="http://leaf.sourceforge.net" target="_top"><img
|
|
|
|
|
|
border="0" src="images/leaflogo.gif" width="49" height="36">
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
</a>Jacques
|
2003-03-22 01:25:40 +01:00
|
|
|
|
Nilo and Eric Wolzak have a LEAF (router/firewall/gateway
|
2003-03-23 19:47:54 +01:00
|
|
|
|
on a floppy, CD or compact flash) distribution
|
2003-03-22 01:25:40 +01:00
|
|
|
|
called <i>Bering</i> that features
|
|
|
|
|
|
Shorewall-1.3.14 and Kernel-2.4.20. You can find
|
|
|
|
|
|
their work at: <a
|
2003-02-20 00:21:55 +01:00
|
|
|
|
href="http://leaf.sourceforge.net/devel/jnilo"> http://leaf.sourceforge.net/devel/jnilo</a></p>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
<b>Congratulations
|
|
|
|
|
|
to Jacques and Eric on the recent release of Bering
|
2003-03-22 01:25:40 +01:00
|
|
|
|
1.1!!! <br>
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h2>News</h2>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<p><b>3/24/2003 - Shorewall 1.4.1 </b><b> </b><b><img
|
2003-03-18 02:13:38 +01:00
|
|
|
|
border="0" src="images/new10.gif" width="28" height="12" alt="(New)">
|
2003-03-23 19:47:54 +01:00
|
|
|
|
<20></b></p>
|
|
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<p>This release follows up on 1.4.0. It corrects a problem introduced
|
|
|
|
|
|
in 1.4.0 and removes additional warts.<br>
|
|
|
|
|
|
<br>
|
|
|
|
|
|
<b>Problems Corrected:</b><br>
|
|
|
|
|
|
</p>
|
|
|
|
|
|
<ol>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
<li>When Shorewall 1.4.0 is run under the ash shell (such as on Bering/LEAF),
|
2003-03-22 01:25:40 +01:00
|
|
|
|
it can attempt to add ECN disabling rules even if the /etc/shorewall/ecn file
|
|
|
|
|
|
is empty. That problem has been corrected so that ECN disabling rules are
|
|
|
|
|
|
only added if there are entries in /etc/shorewall/ecn.</li>
|
|
|
|
|
|
</ol>
|
|
|
|
|
|
<b>New Features:</b><br>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
<blockquote>Note: In the list that follows, the term <i>group </i>refers
|
|
|
|
|
|
to a particular network or subnetwork (which may be 0.0.0.0/0 or it may be
|
2003-03-22 01:25:40 +01:00
|
|
|
|
a host address) accessed through a particular interface. Examples:<br>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<blockquote>eth0:0.0.0.0/0<br>
|
|
|
|
|
|
eth2:192.168.1.0/24<br>
|
|
|
|
|
|
eth3:192.0.2.123<br>
|
|
|
|
|
|
</blockquote>
|
|
|
|
|
|
You can use the "shorewall check" command to see the groups associated with
|
|
|
|
|
|
each of your zones.<br>
|
|
|
|
|
|
</blockquote>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<ol>
|
|
|
|
|
|
<li>Beginning with Shorewall 1.4.1, if a zone Z comprises more than
|
|
|
|
|
|
one group<i> </i>then if there is no explicit Z to Z policy and there are
|
|
|
|
|
|
no rules governing traffic from Z to Z then Shorewall will permit all traffic
|
|
|
|
|
|
between the groups in the zone.</li>
|
|
|
|
|
|
<li>Beginning with Shorewall 1.4.1, Shorewall will never create rules
|
|
|
|
|
|
to handle traffic from a group to itself.</li>
|
|
|
|
|
|
<li>A NONE policy is introduced in 1.4.1. When a policy of NONE is
|
|
|
|
|
|
specified from Z1 to Z2:</li>
|
|
|
|
|
|
</ol>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<ul>
|
|
|
|
|
|
<li>There may be no rules created that govern connections from Z1
|
|
|
|
|
|
to Z2.</li>
|
|
|
|
|
|
<li>Shorewall will not create any infrastructure to handle traffic
|
|
|
|
|
|
from Z1 to Z2.</li>
|
|
|
|
|
|
</ul>
|
|
|
|
|
|
See the <a href="upgrade_issues.htm">upgrade issues</a> for a discussion
|
|
|
|
|
|
of how these changes may affect your configuration.
|
2003-02-08 21:46:02 +01:00
|
|
|
|
<p><a href="News.htm">More News</a></p>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h2> </h2>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h1 align="center"><a href="http://www.sf.net"><img align="left"
|
|
|
|
|
|
alt="SourceForge Logo"
|
|
|
|
|
|
src="http://sourceforge.net/sflogo.php?group_id=22587&type=3">
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</a></h1>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h4> </h4>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h2>This site is hosted by the generous folks at <a
|
|
|
|
|
|
href="http://www.sf.net">SourceForge.net</a> </h2>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<h2><a name="Donations"></a>Donations</h2>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</td>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<td width="88"
|
2003-02-08 21:46:02 +01:00
|
|
|
|
bgcolor="#4b017c" valign="top" align="center"> <br>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</td>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</tr>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</tbody>
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
</table>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</center>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</div>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<table border="0" cellpadding="5" cellspacing="0"
|
|
|
|
|
|
style="border-collapse: collapse;" width="100%" id="AutoNumber2"
|
|
|
|
|
|
bgcolor="#4b017c">
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<tbody>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<tr>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<td width="100%"
|
2003-03-23 19:47:54 +01:00
|
|
|
|
style="margin-top: 1px;">
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2002-12-28 16:38:03 +01:00
|
|
|
|
<p align="center"><a href="http://www.starlight.org"> <img
|
|
|
|
|
|
border="4" src="images/newlog.gif" width="57" height="100" align="left"
|
|
|
|
|
|
hspace="10">
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</a></p>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<p align="center"><font size="4" color="#ffffff">Shorewall is free
|
|
|
|
|
|
but if you try it and find it useful, please consider making a donation
|
|
|
|
|
|
to <a
|
2003-03-23 19:47:54 +01:00
|
|
|
|
href="http://www.starlight.org"><font color="#ffffff">Starlight
|
2003-03-22 01:25:40 +01:00
|
|
|
|
Children's Foundation.</font></a> Thanks!</font></p>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</td>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
</tr>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
</tbody>
|
|
|
|
|
|
|
2003-01-14 18:18:42 +01:00
|
|
|
|
</table>
|
2003-03-23 19:47:54 +01:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<p><font size="2">Updated 3/21/2003 - <a href="support.htm">Tom Eastep</a></font>
|
|
|
|
|
|
|
2003-03-22 01:25:40 +01:00
|
|
|
|
<br>
|
|
|
|
|
|
</p>
|
|
|
|
|
|
<br>
|
2003-03-07 00:41:31 +01:00
|
|
|
|
<br>
|
2002-11-09 22:34:47 +01:00
|
|
|
|
</body>
|
|
|
|
|
|
</html>
|
