From 84ed075e10cf1d25631a85ff6676b7cd7855ca1a Mon Sep 17 00:00:00 2001 From: teastep Date: Wed, 19 Feb 2003 23:21:55 +0000 Subject: [PATCH] More Shorewall 1.4.0 changes git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@455 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall-docs/Documentation.htm | 6093 ++++++++--------- Shorewall-docs/FAQ.htm | 2127 +++--- Shorewall-docs/MAC_Validation.html | 153 +- Shorewall-docs/News.htm | 3131 +++++---- Shorewall-docs/Shorewall_Squid_Usage.html | 788 +-- Shorewall-docs/configuration_file_basics.htm | 625 +- Shorewall-docs/errata.htm | 761 +- Shorewall-docs/mailing_list.htm | 400 +- Shorewall-docs/myfiles.htm | 190 - Shorewall-docs/ping.html | 275 +- Shorewall-docs/seattlefirewall_index.htm | 388 +- Shorewall-docs/shoreline.htm | 165 +- .../shorewall_extension_scripts.htm | 139 +- Shorewall-docs/shorewall_quickstart_guide.htm | 414 +- Shorewall-docs/shorewall_setup_guide.htm | 4114 +++++------ Shorewall-docs/sourceforge_index.htm | 482 +- Shorewall-docs/spam_filters.htm | 79 +- .../starting_and_stopping_shorewall.htm | 455 +- Shorewall-docs/support.htm | 569 +- Shorewall-docs/traffic_shaping.htm | 587 +- Shorewall-docs/troubleshoot.htm | 371 +- Shorewall-docs/two-interface.htm | 1691 ++--- Shorewall-docs/upgrade_issues.htm | 447 +- .../whitelisting_under_shorewall.htm | 547 +- 24 files changed, 12304 insertions(+), 12687 deletions(-) delete mode 100644 Shorewall-docs/myfiles.htm diff --git a/Shorewall-docs/Documentation.htm b/Shorewall-docs/Documentation.htm index 6561d1473..c7d295e72 100644 --- a/Shorewall-docs/Documentation.htm +++ b/Shorewall-docs/Documentation.htm @@ -2,1766 +2,1736 @@ - + - + - + - Shorewall 1.3 Documentation + Shorewall 1.4 Documentation - - + + + - + + + - + - - - + + - - - - -
+
- -

Shorewall 1.3 Reference

-
- -

This documentation is intended primarily for reference. - Step-by-step instructions for configuring Shorewall in -common setups may be found in the QuickStart Guides.

- - -

Components

- - -

Shorewall consists of the following components:

- - - - -

/etc/shorewall/params

- - -

You may use the file /etc/shorewall/params file to set shell variables - that you can then use in some of the other configuration files.

- - -

It is suggested that variable names begin with an upper case letter to distinguish them from variables used internally - within the Shorewall programs

- - -

Example:

- - -
 	NET_IF=eth0
NET_BCAST=130.252.100.255
NET_OPTIONS=blacklist,norfc1918
- -

Example (/etc/shorewall/interfaces record):

- -
	net $NET_IF $NET_BCAST $NET_OPTIONS
- -

The result will be the same as if the record had been written

- -
	net eth0 130.252.100.255 blacklist,norfc1918
- -

Variables may be used anywhere in the other configuration - files.

- -

/etc/shorewall/zones

+

Shorewall 1.4 Reference

+ + - -

This file is used to define the network zones. There is one entry - in /etc/shorewall/zones for each zone; Columns in an entry -are:

- - - - - -

The /etc/shorewall/zones file released with Shorewall is as follows:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - + +
ZONE DISPLAY COMMENTS
netNetInternet
locLocalLocal networks
dmzDMZDemilitarized zone
- -

You may add, delete and modify entries in the /etc/shorewall/zones file - as desired so long as you have at least one zone defined.

+ +

This documentation is intended primarily for reference. + Step-by-step instructions for configuring Shorewall in + common setups may be found in the QuickStart Guides.

- -

Warning 1: If you rename or delete a zone, you should perform "shorewall - stop; shorewall start" to install the change rather than "shorewall - restart".

+ +

Components

+ + +

Shorewall consists of the following components:

-

Warning 2: The order of entries in the /etc/shorewall/zones file is - significant in some cases.

- - -

/etc/shorewall/interfaces

- - -

This file is used to tell the firewall which of your firewall's network - interfaces are connected to which zone. There will be one -entry in /etc/shorewall/interfaces for each of your interfaces. -Columns in an entry are:

-