Questions tagged [shorewall]

Shorewall is a gateway/firewall configuration tool for GNU/Linux.

Filter by
Sorted by
Tagged with
0
votes
1answer
30 views

Ansible - Change Exact IP address

Assume that shorewall rules config contain ACCEPT net:1.234.5.253 all tcp 3306 ACCEPT net:1.234.5.2 all tcp 80 ACCEPT net:1.234.5.2 all tcp 80 ACCEPT net:1.2.3.4,1.234.5.22,...
1
vote
0answers
575 views

shorewall logging, but not to syslog

I have a Debian 9.1 installation I'm using as a NAT router. Shorewall version 5.0.15.6-1, linux kernel version 4.9+80+deb9u1. There are two network interfaces. The routing functions are all working ...
1
vote
0answers
182 views

shorewall - problems with traffic shaping

I'm shaping my traffic such that VoIP calls have highest priority, followed by, VPN, then general network surfing, and lastly, large downloads. [tcclasses] lw 1 200kbit full 1 tos=0x68/0xfc,tos=0xb8/...
0
votes
1answer
229 views

IPSET matching unavailable for one linux installation, but not another… and only IPv4 is affected [closed]

I have two Ubuntu 16.04 servers, one on a little intel atom itx box on my local network and one hosted as a VPS. Both were installed fresh within the last week. Both are generally the same ...
1
vote
0answers
150 views

shorewall - VoIP - jitter buffer

I am using shorewall as my firewall and traffic shaping platform; however, I'm wondering what more I can do to help mitigate upstream jitter issues. I have a fair amount of bandwidth, but the ...
0
votes
3answers
236 views

Debian linux systemd shutdown, have shorewall service wait for fail2ban service

Running Debian unstable with shorewall for the firewall and fail2ban. Was getting "shorewall not running errors" upon boot up in the fail2ban log, but that was fixed with After=network.target in /...
1
vote
0answers
2k views

RPM build errors: Bad exit status from /var/tmp/rpm-tmp.8ntGMt (%install)

I'm getting an error that I'm not sure how to debug. Any thoughts on the matter? Here are the contents of the shorewall.spec file %global mainver 5.0.4 %global baseurl http://www.shorewall.net/pub/...
1
vote
1answer
277 views

Shorewall 4-interface setup

I am trying to use shorewall on Arch to manage a setup with 2 local networks and 2 ISP connections. Ultimately I want traffic from local network 1 (192.168.1.0/24 interface enp5s0) to use ISP 1 (76. .....
2
votes
1answer
223 views

Shorewall to protect interfaces that are not yet defined

I am planning to use Shorewall to filter traffic that originates from a virtual interface created by OpenVPN (lets call it tap0). If OpenVPN did not successfully create this interface before ...
1
vote
1answer
257 views

shorewall configuration for allowing chromecast

I am having difficulty setting up chromecast on my local network. The chromecast device is successfully connected to my network, but reports it cannot access the Internet. That is not true, because ...
1
vote
1answer
787 views

Shorewall rejects traffic when being forwarded on a single public interface

I am trying to do a similar exercise to shorewall FAQ 2a but with public IP addresses. I have traffic that I am trying to route via an IPSEC connection but once I turn on shorewall I get the following ...
0
votes
1answer
211 views

Can Shorewall be used on VyOS?

Will VyOS still work right if I install Shorewall-lite on it? Shorewall seems like an easier way to setup a network, but VyOS seems pretty great for day-to-day management of a router / firewall. So ...