Gentoo Packages

Search

Package Information

Description:

The Shoreline Firewall, more commonly known as "Shorewall", is high-level tool for configuring Netfilter. You describe your firewall/gateway requirements using entries in a set of configuration files. Shorewall reads those configuration files and with the help of the iptables, iptables-restore, ip and tc utilities, Shorewall configures Netfilter and the Linux networking subsystem to match your requirements. Shorewall can be used on a dedicated firewall system, a multi-function gateway/router/server or on a standalone GNU/Linux system. Shorewall does not use Netfilter's ipchains compatibility mode and can thus take advantage of Netfilter's connection state tracking capabilities. Shorewall is not a daemon. Once Shorewall has configured the Linux networking subsystem, its job is complete and there is no "Shorewall process" left running in your system. The /usr/sbin/shorewall program can be used at any time to monitor the Netfilter firewall.

Homepage:

https://shorewall.org/

License:

GPL-2

Versions

Metadata

Description

• The Shoreline Firewall, more commonly known as "Shorewall", is high-level tool for configuring Netfilter. You describe your firewall/gateway requirements using entries in a set of configuration files. Shorewall reads those configuration files and with the help of the iptables, iptables-restore, ip and tc utilities, Shorewall configures Netfilter and the Linux networking subsystem to match your requirements. Shorewall can be used on a dedicated firewall system, a multi-function gateway/router/server or on a standalone GNU/Linux system. Shorewall does not use Netfilter's ipchains compatibility mode and can thus take advantage of Netfilter's connection state tracking capabilities. Shorewall is not a daemon. Once Shorewall has configured the Linux networking subsystem, its job is complete and there is no "Shorewall process" left running in your system. The /usr/sbin/shorewall program can be used at any time to monitor the Netfilter firewall.

Maintainers

• Gentoo network monitoring and analysis project (netmon@gentoo.org) - Type: project

Upstream

• Remote IDs:
  • sourceforge: shorewall

<pkgmetadata>
	<maintainer type="project">
		<email>netmon@gentoo.org</email>
		<name>Gentoo network monitoring and analysis project</name>
	</maintainer>
	<longdescription lang="en">
		The Shoreline Firewall, more commonly known as "Shorewall", is high-level tool for configuring Netfilter.
		You describe your firewall/gateway requirements using entries in a set of configuration files.
		Shorewall reads those configuration files and with the help of the iptables, iptables-restore, ip and
		tc utilities, Shorewall configures Netfilter and the Linux networking subsystem to match your requirements.
		Shorewall can be used on a dedicated firewall system, a multi-function gateway/router/server or on a
		standalone GNU/Linux system. Shorewall does not use Netfilter's ipchains compatibility mode and can thus
		take advantage of Netfilter's connection state tracking capabilities.

		Shorewall is not a daemon. Once Shorewall has configured the Linux networking subsystem, its job is complete and
		there is no "Shorewall process" left running in your system. The /usr/sbin/shorewall program can be used at
		any time to monitor the Netfilter firewall.
	</longdescription>
	<use>
		<flag name="init">Adds the capability to place the firewall in a safe state prior to bringing up the network interfaces</flag>
		<flag name="ipv4">Installs everything needed to create a full IPv4 firewall</flag>
		<flag name="ipv6">Adds the capability to create a full IPv6 firewall (requires <pkg>net-firewall/shorewall</pkg> ipv4 USE flag)</flag>
		<flag name="lite4">Installs everything needed to just *run* an IPv4 compiled firewall script created with <pkg>net-firewall/shorewall</pkg> ipv4 USE flag</flag>
		<flag name="lite6">Installs everything needed to just *run* an IPv6 compiled firewall script created with <pkg>net-firewall/shorewall</pkg> ipv6 USE flag</flag>
	</use>
	<upstream>
		<doc lang="en">http://shorewall.net/Documentation_Index.html</doc>
		<remote-id type="sourceforge">shorewall</remote-id>
	</upstream>
</pkgmetadata>

Lint Warnings

• [Warning] Ebuild 5.2.8-r5 uses IUSE flag 'selinux' which is not documented in metadata.xml. Add the flag to metadata.xml <use> section.
• [Warning] Missing md5-cache for version 5.2.8-r5. Run 'ebuild <ebuild_file> manifest' or 'egencache' to generate it.

USE Flags

Files

• shorewall-5.2.1-no-gzipped-manpages.patch
• shorewall-5.2.8-egrep_fgrep_deprecation.patch
• shorewall-core-5.2.1-no-gzipped-manpages.patch
• shorewall-core-5.2.8-egrep_fgrep_deprecation.patch
• shorewall-init-01_remove-ipset-functionality-r2.patch
• shorewall-init-5.2.8-egrep_fgrep_deprecation.patch
• shorewall-init.confd
• shorewall-init.initd
• shorewall-init.readme
• shorewall-init.systemd
• shorewall-lite-5.2.1-no-gzipped-manpages.patch
• shorewall-lite-5.2.8-egrep_fgrep_deprecation.patch
• shorewall-lite.confd-r1
• shorewall-lite.initd-r3
• shorewall-lite.systemd
• shorewall.confd-r1
• shorewall.initd-r3
• shorewall.systemd
• shorewall6-5.2.8-egrep_fgrep_deprecation.patch
• shorewall6-lite-5.2.8-egrep_fgrep_deprecation.patch
• shorewall6-lite.systemd
• shorewall6.systemd
• shorewallrc-r3

Manifest