Some Linux Tips




LINKS

Some Debian Tips
awardspace.com "free webhost"
drivehq.com "free storage"
spideroak.com "free storage"
dnsexit dynamic dns server
freedns.afraid dynamic dns server
dns.he.net dynamic dns server




index   Previous   Next


shorewall is a linux firewall from the http://www.shorewall.net/.
This is two interface configuration, the configuration files are in the /etc/shorewall.
To enbale the starting at system boot change the startup values in the shorewall.conf and /etc/default/shorewall from 0 to 1:

Startup = 1

As well set these values in the shorewall.conf as:

IP_FORWARDING=on
ROUTE_FILTER=no
DISABLE_IPV6=yes


Configure these files /etc/shorewall as:
interfaces:

#ZONE   INTERFACE   BROADCAST   OPTIONS
#net   eth0    detect    dhcp,tcpflags,nosmurfs,routefilter,logmartians
net   ppp0     -    dhcp,tcpflags,nosmurfs,routefilter,logmartians
loc   eth0    detect    tcpflags,nosmurfs,routefilter,logmartians


policy:

#SOURCE DEST POLICY LOG LEVEL LIMIT:BURST
$FW    net    ACCEPT
loc    net    ACCEPT
net   all    DROPE    info
loc    $FW    ACCEPT
$FW    loc    ACCEPT
# THE FOLLOWING POLICY MUST BE LAST
all    all    REJECT    info


zones:

#ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS
fw    firewall
net    ipv4
loc    ipv4


masq:

#INTERFACE SOURCE ADDRESS PROTO PORT(S) IPSEC MARK
eth0    192.168.1.0/29,\
        10.0.0.0/8,\
       169.254.0.0/16,\
       172.16.0.0/12,\
       192.168.0.0/16


Downalod the two other config files rules and shorewall.conf.

To see the shorewall log run the command:

/sbin/shorewall show log


for debug run:

shorewall debug start 2> /tmp/trace


and read the /tmp/trace file for errors.