## Shorewall 4.4/4.5/4.6 Documentation

### Tom Eastep

Copyright © 2001-2014 Thomas M. Eastep

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the license is included in the section entitled “GNU Free Documentation License”.

2015/11/26

## Frequently Used Articles

FAQs
IPv4 Manpages
IPv6 Manpages
Configuration File Basics
Beginner Documentation
Troubleshooting

## Documentation for Earlier Versions

Shorewall 4.0/4.2 Documentation

## Index to the HOWTOs and Other Articles

6to4 and 6in4 Tunnels | KVM (Kernel-mode Virtual Machine) | Shorewall on a Laptop
Accounting | Linux Containers (LXC) | Shorewall Perl
Actions | Linux-vserver | Shorewall Setup Guide
Aliased (virtual) Interfaces (e.g., eth0:0) | Limiting Connection Rates | SMB
Anatomy of Shorewall | Logging | SNAT (Source Network Address Translation)
Anti-Spoofing Measures | Macros | Split DNS the Easy Way
AUDIT Target support | MAC Verification | Squid with Shorewall
Bandwidth Control | Manpages (IPv4) (IPv6) | Starting/stopping the Firewall
Blacklisting/Whitelisting | Manual Chains | Static (one-to-one) NAT
Bridge: Bridge/Firewall | Masquerading | Support
Bridge: No firewalling of traffic between bridge port | Multiple Internet Connections from a Single Firewall | Tips and Hints
Building Shorewall from GIT | Multiple Zones Through One Interface | Traffic Shaping/QOS - Simple
Compiled Programs | My Shorewall Configuration | Traffic Shaping/QOS - Complex
Commands | Netfilter Overview | Transparent Proxy
Configuration File Basics | Network Mapping | UPnP
DHCP | One-to-one NAT (Static NAT) | OpenVZ
DNAT (Destination Network Address Translation) | OpenVPN | Upgrade Issues
Dynamic Zones | Operating Shorewall | Upgrading to Shorewall 4.4 (Upgrading Debian Lenny to Squeeze)
ECN Disabling by host or subnet | Packet Marking | VPN
Events | Packet Processing in a Shorewall-based Firewall | VPN Passthrough
Extension Scripts (User Exits) | 'Ping' Management | White List Creation
Fallback/Uninstall | Port Forwarding | Xen - Shorewall in a Bridged Xen DomU
FAQs | Port Information | Xen - Shorewall in Routed Xen Dom0
Features | Port Knocking (deprecated) |
Forwarding Traffic on the Same Interface | Port Knocking, Auto Blacklisting and Other Uses of the 'Recent Match' |
FTP and Shorewall | PPTP |
Fool's Firewall | Proxy ARP |
Helpers/Helper Modules | QuickStart Guides |
Installation/Upgrade | Release Model |
IPP2P | Requirements |
IPSEC | Routing and Shorewall |
Ipsets | Routing on One Interface |
IPv6 Support | Samba |
ISO 3661 Country Codes | Shorewall Events |
Kazaa Filtering | Shorewall Init |
Kernel Configuration | Shorewall Lite |