## Shorewall 5.0 Documentation

### Tom Eastep

Copyright © 2001-2017 Thomas M. Eastep

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover, and with no Back-Cover Texts. A copy of the license is included in the section entitled “GNU Free Documentation License”.

2026/01/29

## Frequently Used Articles

FAQs
Manpages
Configuration File Basics
Beginner Documentation
Troubleshooting

## Documentation for Earlier Versions

Shorewall 4.4/4.6 Documentation

Shorewall 4.0/4.2 Documentation

## Index to the HOWTOs and Other Articles

6to4 and 6in4 Tunnels | KVM (Kernel-mode Virtual Machine) | Shorewall on a Laptop
Accounting | Linux Containers (LXC) | Shorewall Perl
Actions | Linux-vserver | Shorewall Setup Guide
Aliased (virtual) Interfaces (e.g., eth0:0) | Limiting Connection Rates | SMB
Anatomy of Shorewall | Logging | SNAT (Source Network Address Translation)
Anti-Spoofing Measures | Macros | Split DNS the Easy Way
AUDIT Target support | MAC Verification | Squid with Shorewall
Bandwidth Control | Manpages | Starting/stopping the Firewall
Blacklisting/Whitelisting | Manual Chains | Static (one-to-one) NAT
Bridge: Bridge/Firewall | Masquerading | Support
Bridge: No firewalling of traffic between bridge port | Multiple Internet Connections from a Single Firewall | Tips and Hints
Building Shorewall from GIT | Multiple Zones Through One Interface | Traffic Shaping/QOS - Simple
Compiled Programs | My Shorewall Configuration | Traffic Shaping/QOS - Complex
Commands | Netfilter Overview | Transparent Proxy
Configuration File Basics | Network Mapping | UPnP
DHCP | One-to-one NAT (Static NAT) | OpenVZ
DNAT (Destination Network Address Translation) | OpenVPN | Upgrade Issues
Docker | Operating Shorewall | Upgrading to Shorewall 4.4 (Upgrading Debian Lenny to Squeeze)
Dynamic Zones | Packet Marking | VPN
ECN Disabling by host or subnet | Packet Processing in a Shorewall-based Firewall | VPN Passthrough
Events | 'Ping' Management | White List Creation
Extension Scripts (User Exits) | Port Forwarding | Xen - Shorewall in a Bridged Xen DomU
Fallback/Uninstall | Port Information | Xen - Shorewall in Routed Xen Dom0
FAQs | Port Knocking (deprecated) |
Features | Port Knocking, Auto Blacklisting and Other Uses of the 'Recent Match' |
Forwarding Traffic on the Same Interface | PPTP |
FTP and Shorewall | Proxy ARP |
Fool's Firewall | QuickStart Guides |
Helpers/Helper Modules | Release Model |
Installation/Upgrade | Requirements |
IPP2P | Routing and Shorewall |
IPSEC | Routing on One Interface |
Ipsets | Samba |
IPv6 Support | Shared Shorewall/Shorewall6 Configuration |
ISO 3661 Country Codes | Shorewall Events |
Kazaa Filtering | Shorewall Init |
Kernel Configuration | Shorewall Lite |