Shorewall on RPM-based Servers - Revision history

Digimer: /* Install */

2015-05-05T22:21:02Z

Install

← Older revision		Revision as of 22:21, 5 May 2015
Line 5:		Line 5:
	= Install =		= Install =

	{{note\|1=Updated on <span class="code">~~2014~~-06-11</span> for Shorewall release 4.6.1.}}		{{note\|1=Updated on <span class="code">2015-05-05</span> for Shorewall release 4.6.8.}}

	Install is trivial, we just need to install dependencies and and the latest RPMs.		Install is trivial, we just need to install dependencies and and the latest RPMs.
Line 16:		Line 16:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	rpm -Uvh http://canada.shorewall.net/pub/shorewall/4.6/shorewall-4.6.1/shorewall-4.6.1-0base.noarch.rpm \		rpm -Uvh http://canada.shorewall.net/pub/shorewall/4.6/shorewall-4.6.8/shorewall-core-4.6.8-0base.noarch.rpm \
	http://canada.shorewall.net/pub/shorewall/4.6/shorewall-4.6.1/shorewall~~-core~~-4.6.1-0base.noarch.rpm		http://canada.shorewall.net/pub/shorewall/4.6/shorewall-4.6.8/shorewall-4.6.8-0base.noarch.rpm
	</syntaxhighlight>		</syntaxhighlight>

2014-06-26T23:29:51Z

Fixing SELinux Problems

2014-06-26T23:29:26Z

Fixing SELinux Problems =

2014-06-26T23:29:07Z

Starting the Firewall

@@ Line 243: / Line 243: @@
 <syntaxhighlight lang="bash">
 chkconfig shorewall on
 </syntaxhighlight>
 {{footer}}

2014-06-11T23:50:49Z

@@ Line 5: / Line 5: @@
 = Install =
-{{note|1=Updated on <span class="code">2013-08-04</span> for Shorewall release 4.5.19.}}
+{{note|1=Updated on <span class="code">2014-06-11</span> for Shorewall release 4.6.1.}}
 Install is trivial, we just need to install dependencies and and the latest RPMs.
@@ Line 16: / Line 16: @@
 <syntaxhighlight lang="bash">
-rpm -Uvh http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.19/shorewall-4.5.19-0base.noarch.rpm \
+rpm -Uvh http://canada.shorewall.net/pub/shorewall/4.6/shorewall-4.6.1/shorewall-4.6.1-0base.noarch.rpm \
-          http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.19/shorewall-core-4.5.19-0base.noarch.rpm
+          http://canada.shorewall.net/pub/shorewall/4.6/shorewall-4.6.1/shorewall-core-4.6.1-0base.noarch.rpm
 </syntaxhighlight>
@@ Line 28: / Line 28: @@
 * <span class="code">eth0</span>; Faces the internal network, has the IP <span class="code">10.255.255.254/16</span> and provides DHCP services to the LAN.
 * <span class="code">eth1</span>; Faces the Internet.
 == Configuring Shorewall ==

2013-08-04T16:21:31Z

Optional; Multiple Public IP Address Range

← Older revision		Revision as of 16:21, 4 August 2013
Line 59:		Line 59:
	# Public IPs NAT'ed on to servers.		# Public IPs NAT'ed on to servers.
	IPADDR_START="1.2.3.68"		IPADDR_START="1.2.3.68"
	IPADDR_END=1.2.3.127"		IPADDR_END="1.2.3.127"
	CLONENUM_START="1"		CLONENUM_START="1"
	</syntaxhighlight>		</syntaxhighlight>
Line 69:		Line 69:
	</syntaxhighlight>		</syntaxhighlight>

	In this case, the <span class="code">network</span> service will create <span class="code">eth1:1</span> with the IP <span class="code">1.2.3.68</span>, <span class="code">eth1:2</span> with <span class="code">1.2.3.69</span> and so on.		In this case, the <span class="code">network</span> service will create <span class="code">eth1:1</span> with the IP <span class="code">1.2.3.68</span>, <span class="code">eth1:2</span> with <span class="code">1.2.3.69</span> and so on.

	== Configuring Shorewall ==		== Configuring Shorewall ==

2013-08-04T16:20:57Z

2012-12-27T19:41:39Z

← Older revision		Revision as of 19:41, 27 December 2012
Line 5:		Line 5:
	= Install =		= Install =

	{{note\|1=Updated on <span class="code">2012-12-11</span> for Shorewall release 4.5.10.}}		{{note\|1=Updated on <span class="code">2012-12-27</span> for Shorewall release 4.5.11.}}

	Install is trivial, we just need to install dependencies and and the latest RPMs.		Install is trivial, we just need to install dependencies and and the latest RPMs.
Line 16:		Line 16:

	<source lang="bash">		<source lang="bash">
	rpm -Uvh http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.10/shorewall-4.5.10-0base.noarch.rpm \		rpm -Uvh http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.11/shorewall-4.5.11-0base.noarch.rpm \
	http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.10/shorewall-core-4.5.10-0base.noarch.rpm		http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.11/shorewall-core-4.5.11-0base.noarch.rpm
	</source>		</source>

2012-12-11T20:39:48Z

← Older revision		Revision as of 20:39, 11 December 2012
Line 1:		Line 1:
	{{howto_header}}		{{howto_header}}

	This covers setup and maintenance of <span class="code">Shorewall 4.4</span> on Red Hat Enterprise Linux 5.x, 6.x, [[RHEL]] derivatives and several recent Fedora releases.		This covers setup and maintenance of <span class="code">Shorewall 4.5</span> on Red Hat Enterprise Linux 5.x, 6.x, [[RHEL]] derivatives and several recent Fedora releases.

	= Install =		= Install =

	{{note\|1=Updated on <span class="code">2012-10-09</span> for Shorewall release 4.5.~~8-2~~.}}		{{note\|1=Updated on <span class="code">2012-12-11</span> for Shorewall release 4.5.10.}}

	Install is trivial, we just need to install dependencies and and the latest RPMs.		Install is trivial, we just need to install dependencies and and the latest RPMs.
Line 16:		Line 16:

	<source lang="bash">		<source lang="bash">
	rpm -Uvh http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.8/shorewall-4.5.8-2.noarch.rpm \		rpm -Uvh http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.10/shorewall-4.5.10-0base.noarch.rpm \
	http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.8/shorewall-core-4.5.8-2.noarch.rpm		http://canada.shorewall.net/pub/shorewall/4.5/shorewall-4.5.10/shorewall-core-4.5.10-0base.noarch.rpm
	</source>		</source>

2012-10-09T20:40:24Z

interfaces

← Older revision		Revision as of 20:40, 9 October 2012
Line 118:		Line 118:

	=== interfaces ===		=== interfaces ===

			{{Note\|1=There are now two <span class="code">FORMAT</span> types; <span class="code">1</span>, which is the old-style and <span class="code">2</span>, the new style which this tutorial now uses.}}

	Here you tell Shorewall which network [[#zones\|zones]] are on which interfaces.		Here you tell Shorewall which network [[#zones\|zones]] are on which interfaces.
Line 127:		Line 129:
	</source>		</source>
	<source lang="text">		<source lang="text">
	net eth0 ~~detect~~		net eth0
	loc eth1 ~~detect~~ dhcp		loc eth1 dhcp
	</source>		</source>

Line 136:		Line 138:

	<source lang="text">		<source lang="text">
			#
			# Shorewall version 4 - Interfaces File
			#
			# For information about entries in this file, type "man shorewall-interfaces"
			#
			# The manpage is also online at
			# http://www.shorewall.net/manpages/shorewall-interfaces.html
			#
			###############################################################################
			FORMAT 2
	###############################################################################		###############################################################################
	#ZONE INTERFACE ~~BROADCAST~~ OPTIONS		#ZONE INTERFACE OPTIONS
	net eth0 ~~detect~~		net eth0
	loc eth1 ~~detect~~ dhcp		loc eth1 dhcp
	</source>		</source>