## Shorewall 4.4/4.5 Documentation

### Tom Eastep

Copyright © 2001-2013 Thomas M. Eastep

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the license is included in the section entitled “GNU Free Documentation License”.

2014/05/25

## Frequently Used Articles

FAQs
IPv4 Manpages
IPv6 Manpages
Configuration File Basics
Beginner Documentation
Troubleshooting

## Documentation for Earlier Versions

Shorewall 4.0/4.2 Documentation

## Index to the HOWTOs and Other Articles

6to4 and 6in4 Tunnels | Linux Containers (LXC) | Shorewall on a Laptop
Accounting | Linux-vserver | Shorewall Perl
Actions | Limiting Connection Rates | Shorewall Setup Guide
Aliased (virtual) Interfaces (e.g., eth0:0) | Logging | SMB
Anatomy of Shorewall | Macros | SNAT (Source Network Address Translation)
Anti-Spoofing Measures | MAC Verification | Split DNS the Easy Way
AUDIT Target support | Manpages (IPv4) (IPv6) | Squid with Shorewall
Bandwidth Control | Manual Chains | Starting/stopping the Firewall
Blacklisting/Whitelisting | Masquerading | Static (one-to-one) NAT
Bridge: Bridge/Firewall | Multiple Internet Connections from a Single Firewall | Support
Bridge: No firewalling of traffic between bridge port | Multiple Zones Through One Interface | Tips and Hints
Building Shorewall from GIT | My Shorewall Configuration | Traffic Shaping/QOS - Simple
Commands | Netfilter Overview | Traffic Shaping/QOS - Complex
Configuration File Basics | Network Mapping | Transparent Proxy
DHCP | One-to-one NAT (Static NAT) | UPnP
DNAT (Destination Network Address Translation) | OpenVPN | OpenVZ
Dynamic Zones | OpenVZ | Upgrade Issues
ECN Disabling by host or subnet | Operating Shorewall | Upgrading to Shorewall 4.4 (Upgrading Debian Lenny to Squeeze)
Events | Packet Marking | VPN
Extension Scripts (User Exits) | Packet Processing in a Shorewall-based Firewall | VPN Passthrough
Fallback/Uninstall | 'Ping' Management | White List Creation
FAQs | Port Forwarding | Xen - Shorewall in a Bridged Xen DomU
Features | Port Information | Xen - Shorewall in Routed Xen Dom0
Forwarding Traffic on the Same Interface | Port Knocking (deprecated) |
FTP and Shorewall | Port Knocking, Auto Blacklisting and Other Uses of the 'Recent Match' |
Fool's Firewall | PPTP |
Helpers/Helper Modules | Proxy ARP |
Installation/Upgrade | QuickStart Guides |
IPP2P | Release Model |
IPSEC | Requirements |
Ipsets | Routing and Shorewall |
IPv6 Support | Routing on One Interface |
ISO 3661 Country Codes | Samba |
Kazaa Filtering | Shorewall Events |
Kernel Configuration | Shorewall Init |
KVM (Kernel-mode Virtual Machine) | Shorewall Lite |