Shorewall for Linux

Giới Thiệu · Shorewall for Linux

Shorewall for Linux (the Shoreline Firewall), is a tool for configuring Netfilter. You describe your firewall or gateway requirements using entries in a set of configuration files. Shorewall reads those configuration files and with the help of the iptables, iptables-restore, and IP and TC utilities. Shorewall configures Netfilter and the Linux networking subsystem to match your requirements. Shorewall can be used on a dedicated firewall system, a multi-function gateway, router, or server or on a standalone GNU or Linux system. Shorewall does not use Netfilter's ipchains compatibility mode and can thus take advantage of Netfilter's connection state tracking capabilities. Shorewall supports nested and overlapping zones and features multiple interfaces per zone and multiple zones per interface permitted.