forked from extern/shorewall_code
211 lines
7.9 KiB
XML
211 lines
7.9 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
|
|
"http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd">
|
|
<article>
|
|
<!--$Id: template.xml 5908 2007-04-12 23:04:36Z teastep $-->
|
|
|
|
<articleinfo>
|
|
<title>Shorewall6 4.4 Manpages</title>
|
|
|
|
<authorgroup>
|
|
<author>
|
|
<firstname>Tom</firstname>
|
|
|
|
<surname>Eastep</surname>
|
|
</author>
|
|
</authorgroup>
|
|
|
|
<pubdate><?dbtimestamp format="Y/m/d"?></pubdate>
|
|
|
|
<copyright>
|
|
<year>2007</year>
|
|
|
|
<year>2008</year>
|
|
|
|
<year>2009</year>
|
|
|
|
<year>2010</year>
|
|
|
|
<holder>Thomas M. Eastep</holder>
|
|
</copyright>
|
|
|
|
<legalnotice>
|
|
<para>Permission is granted to copy, distribute and/or modify this
|
|
document under the terms of the GNU Free Documentation License, Version
|
|
1.2 or any later version published by the Free Software Foundation; with
|
|
no Invariant Sections, with no Front-Cover, and with no Back-Cover
|
|
Texts. A copy of the license is included in the section entitled
|
|
<quote><ulink url="GnuCopyright.htm">GNU Free Documentation
|
|
License</ulink></quote>.</para>
|
|
</legalnotice>
|
|
</articleinfo>
|
|
|
|
<warning>
|
|
<para>These manpages are for Shorewall6 4.0 only. They describe features
|
|
and options not available on earlier releases.</para>
|
|
</warning>
|
|
|
|
<note>
|
|
<para>The docbook to manpage translation tool that we are using has some
|
|
indentation issues which require us to choose between correct output of
|
|
the man command and correctly-indented HTML. We've chosen in favor of the
|
|
man command so some of the manpages accessed through the links below have
|
|
indentation problems. We're working to resolve these issues and ask for
|
|
your patience.</para>
|
|
</note>
|
|
|
|
<section id="Section5">
|
|
<title>Section 5 — Files and Concepts</title>
|
|
|
|
<blockquote>
|
|
<simplelist>
|
|
<member><ulink
|
|
url="manpages6/shorewall6-accounting.html">accounting</ulink> - Define
|
|
IP accounting rules.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-actions.html">actions</ulink>
|
|
- Declare user-defined actions.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-blacklist.html">blacklist</ulink> - Static
|
|
blacklisting (deprecated)</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-conntrack.html">conntrack</ulink> - Specify
|
|
helpers for connections or exempt certain traffic from netfilter
|
|
connection tracking.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-exclusion.html">exclusion</ulink> -
|
|
Excluding hosts from a network or zone</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-hosts.html">hosts</ulink> -
|
|
Define multiple zones accessed through a single interface</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-interfaces.html">interfaces</ulink> - Define
|
|
the interfaces on the system and optionally associate them with
|
|
zones.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-maclist.html">maclist</ulink>
|
|
- Define MAC verification.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall-mangle.html">mangle</ulink> -
|
|
Supercedes tcrules and describes packet/connection marking.</member>
|
|
|
|
<member><ulink url="manpages/shorewall-masq.html">masq</ulink> -
|
|
Define Masquerade/SNAT</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-modules.html">modules</ulink>
|
|
- Specify which kernel modules to load.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-nesting.html">nesting</ulink>
|
|
- How to define nested zones.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-notrack.html">notrack</ulink>
|
|
- Exclude certain traffic from Netfilter6 connection tracking (renamed
|
|
<ulink url="manpages6/shorewall6-conntrack.html">conntrack</ulink> in
|
|
Shorewall 4.5.7)</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-params.html">params</ulink> -
|
|
Assign values to shell variables used in other files.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-policy.html">policy</ulink> -
|
|
Define high-level policies for connections between zones.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-providers.html">providers</ulink> - Define
|
|
routing tables, usually for multiple Internet links.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-proxyndp.html">proxyndp</ulink> - Defines
|
|
Proxy NDP</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-rtrules.html">rtrules</ulink>
|
|
- Define routing rules.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-routes.html">routes</ulink> -
|
|
(Added in Shorewall 4.4.15) Add additional routes to provider routing
|
|
tables.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-routestopped.html">routestopped</ulink> -
|
|
Specify connections to be permitted when Shorewall6 is in the stopped
|
|
state (Deprecated in Shoreall 4.5.8).</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-rules.html">rules</ulink> -
|
|
Specify exceptions to policies, including DNAT and REDIRECT.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-secmarks.html">secmarks</ulink> - Attached
|
|
an SELinux context to a packet.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-stoppedrules.html">stoppedrules</ulink> -
|
|
Specify connections to be permitted when Shorewall6 is in the stopped
|
|
state (Added in Shoreall 4.5.8).</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-tcclasses.html">tcclasses</ulink> - Define
|
|
htb classes for traffic shaping.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-tcdevices.html">tcdevices</ulink> - Specify
|
|
speed of devices for traffic shaping.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-tcinterfaces.html">tcinterfaces</ulink> -
|
|
Specify interfaces for simplified traffic shaping.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-tcpri.html">tcpri</ulink> -
|
|
Classify traffic for simplified traffic shaping.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-tcrules.html">tcrules</ulink>
|
|
- Define packet marking rules, usually for traffic shaping. Superceded
|
|
by mangle (above) in Shorewall 4.6.0.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-tos.html">tos</ulink> -
|
|
Define TOS field manipulation.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-tunnels.html">tunnels</ulink>
|
|
- Define VPN connections with endpoints on the firewall.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6.conf.html">shorewall6.conf</ulink> - Specify
|
|
values for global Shorewall6 options.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-lite.conf.html">shorewall6-lite.conf</ulink>
|
|
- Specify values for global Shorewall6 Lite options.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-vardir.html">vardir</ulink> -
|
|
Redefine the directory where Shorewall6 keeps its state
|
|
information.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-lite-vardir.html">vardir-lite</ulink> -
|
|
Redefine the directory where Shorewall6 Lite keeps its state
|
|
information.</member>
|
|
|
|
<member><ulink url="manpages6/shorewall6-zones.html">zones</ulink> -
|
|
Declare Shorewall6 zones.</member>
|
|
</simplelist>
|
|
</blockquote>
|
|
</section>
|
|
|
|
<section id="Section8">
|
|
<title>Section 8 — Administrative Commands</title>
|
|
|
|
<blockquote>
|
|
<simplelist>
|
|
<member><ulink url="manpages6/shorewall6.html">shorewall6</ulink> -
|
|
/sbin/shorewall6 command syntax and semantics.</member>
|
|
|
|
<member><ulink
|
|
url="manpages6/shorewall6-lite.html">shorewall6-lite</ulink> -
|
|
/sbin/shorewall6-lite command syntax and semantics.</member>
|
|
</simplelist>
|
|
</blockquote>
|
|
</section>
|
|
</article>
|