Questions tagged [shorewall]

Shorewall is a gateway/firewall configuration tool for GNU/Linux.

1
vote
0answers
348 views

shorewall logging, but not to syslog

I have a Debian 9.1 installation I'm using as a NAT router. Shorewall version 5.0.15.6-1, linux kernel version 4.9+80+deb9u1. There are two network interfaces. The routing functions are all working ...
1
vote
0answers
163 views

shorewall - problems with traffic shaping

I'm shaping my traffic such that VoIP calls have highest priority, followed by, VPN, then general network surfing, and lastly, large downloads. [tcclasses] lw 1 200kbit full 1 tos=0x68/0xfc,tos=0xb8/...
0
votes
1answer
155 views

IPSET matching unavailable for one linux installation, but not another… and only IPv4 is affected [closed]

I have two Ubuntu 16.04 servers, one on a little intel atom itx box on my local network and one hosted as a VPS. Both were installed fresh within the last week. Both are generally the same ...
1
vote
0answers
120 views

shorewall - VoIP - jitter buffer

I am using shorewall as my firewall and traffic shaping platform; however, I'm wondering what more I can do to help mitigate upstream jitter issues. I have a fair amount of bandwidth, but the ...
0
votes
2answers
174 views

Debian linux systemd shutdown, have shorewall service wait for fail2ban service

Running Debian unstable with shorewall for the firewall and fail2ban. Was getting "shorewall not running errors" upon boot up in the fail2ban log, but that was fixed with After=network.target in /...
1
vote
0answers
2k views

RPM build errors: Bad exit status from /var/tmp/rpm-tmp.8ntGMt (%install)

I'm getting an error that I'm not sure how to debug. Any thoughts on the matter? Here are the contents of the shorewall.spec file %global mainver 5.0.4 %global baseurl http://www.shorewall.net/pub/...
1
vote
1answer
247 views

Shorewall 4-interface setup

I am trying to use shorewall on Arch to manage a setup with 2 local networks and 2 ISP connections. Ultimately I want traffic from local network 1 (192.168.1.0/24 interface enp5s0) to use ISP 1 (76. .....
2
votes
1answer
190 views

Shorewall to protect interfaces that are not yet defined

I am planning to use Shorewall to filter traffic that originates from a virtual interface created by OpenVPN (lets call it tap0). If OpenVPN did not successfully create this interface before ...
1
vote
1answer
215 views

shorewall configuration for allowing chromecast

I am having difficulty setting up chromecast on my local network. The chromecast device is successfully connected to my network, but reports it cannot access the Internet. That is not true, because ...
1
vote
1answer
609 views

Shorewall rejects traffic when being forwarded on a single public interface

I am trying to do a similar exercise to shorewall FAQ 2a but with public IP addresses. I have traffic that I am trying to route via an IPSEC connection but once I turn on shorewall I get the following ...
0
votes
1answer
193 views

Can Shorewall be used on VyOS?

Will VyOS still work right if I install Shorewall-lite on it? Shorewall seems like an easier way to setup a network, but VyOS seems pretty great for day-to-day management of a router / firewall. So ...