Shorewall

From Wikipedia, the free encyclopedia

Template:Short description Template:DMCA

Page Module:Message box/ambox.css has no content.Page Template:Multiple issues/styles.css has no content.

Page Module:Infobox/styles.css has no content.

Shorewall
[[Programmer|DeveloperTemplate:Pluralize from text]]Thomas M. Eastep
Template:Infobox software/simple
Written inPerl
Operating systemGNU
Available inEnglish
LicenseGPLv2+[1]
Websiteshorewall.org

Script error: No such module "Check for conflicting parameters".

Shorewall is an open source firewall tool for Linux that builds upon the Netfilter (iptables/ipchains) system built into the Linux kernel, making it easier to manage more complex configuration schemes by providing a higher level of abstraction for describing rules using text files. Its documentation is hosted on shorewall.org, while the latest code is hosted at https://gitlab.com/shorewall/code.

Configuration

It is not a daemon since it does not run continuously, but rather configures rules in the kernel allowing and disallowing traffic through the system. Shorewall is configured through a group of plain-text configuration files and does not have a graphical user interface, though a Webmin module is available separately. A monitoring utility packaged with Shorewall can be used to watch the status of the system as it operates and to assist in testing.

Use

Shorewall is mainly used in network installations[4] (as opposed to a personal computer firewall), since most of its strength lies in its ability to work with "zones",[4] such as the DMZ or a 'net' zone. Each zone would then have different rules, making it easy to have for example relaxed rules on the company intranet, yet clamp down on traffic coming in from the Internet.

The plain-text configuration files are usually well-commented and easy to use, though Shorewall may be more difficult for new users to handle than other firewall systems with graphical front-ends.[citation needed]

History

Starting with version 4, Shorewall began using a Perl-based compiler frontend; previously it used a shell-based compiler frontend.[5] Support for IPv6 firewalling is included since version 4.2.4.[6]

On 18 February 2019, primary developer Tom Eastep announced that he is retiring from the project, and 5.2.3 would be his final release.[7] Management of the Shorewall project was handed over to a Shorewall committee who would manage the future direction of the Shorewall project.[8] Tom Eastep however continues to be a major contributor to the Shorewall project as of September 2020.

See also

Script error: No such module "portal-inline".

References

Page Template:Reflist/styles.css has no content.

  1. ^ Page Module:Citation/CS1/styles.css has no content."Shorewall Notices". Shorewall. Retrieved 22 November 2014.
  2. ^ Page Module:Citation/CS1/styles.css has no content."Shoreline Firewall (Shorewall)". Shorewall. Retrieved 29 October 2020.
  3. ^ Page Module:Citation/CS1/styles.css has no content."SHOREWALL 5.2.8" (TXT). Shorewall.net. Retrieved 29 October 2020.
  4. ^ a b Page Module:Citation/CS1/styles.css has no content.Eastep, Thomas M. (19 September 2020). "Current Shorewall Releases". Shorewall. Retrieved 19 April 2021.
  5. ^ Page Module:Citation/CS1/styles.css has no content."R E L E A S E 4 . 4 H I G H L I G H T S" (TXT). Shorewall. Retrieved 22 November 2014.
  6. ^ Page Module:Citation/CS1/styles.css has no content.Eastep, Tom (18 February 2019). "Shoreline Firewall (Shorewall)". Sourceforge (Shorewall). Retrieved 19 April 2021.
  7. ^ Page Module:Citation/CS1/styles.css has no content."Shoreline Firewall (Shorewall) / [Shorewall-users] The end of the road..." sourceforge.net (Shorewall). Retrieved 18 February 2019.
  8. ^ Page Module:Citation/CS1/styles.css has no content."Shoreline Firewall (Shorewall) / [Shorewall-announce] The Next Chapter for Shorewall". sourceforge.net (Shorewall). Retrieved 29 October 2020.
  • No URL found. Please specify a URL here or add one to Wikidata.

Lua error in package.lua at line 80: module 'Module:Navbox/configuration' not found.