Shorewall and the 2.6 Linux Kernel Tom Eastep 2003-07-02 2003 Thomas M. Eastep Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the license is included in the section entitled GNU Free Documentation License.
General Shorewall is compatible with the Linux 2.6 kernel series and contains support for the following features that are added in that series: NETMAP Target Support. Bridge/Firewall Support (physdev match support).
IPSEC The 2.6 Linux kernel introduces a new implementation of IPSEC which eliminates the ipsecN device names. Netfilter/iptables support for this new implementation is incomplete and therefore Shorewall support is limited. See the Shorewall IPSEC documentation.