Table of contents
Comprehensive Configuration
Shorewall offers a comprehensive framework for configuring firewall rules, allowing for detailed network management and control over traffic flow.
Rule Management
It provides powerful rule management capabilities, with the ability to define rules based on zones, interfaces, and IP addresses.
Flexible Deployment
Shorewall can be deployed in various environments, supporting both IPv4 and IPv6, with options for advanced configurations like VPNs and port forwarding.
Strong Community Support
The tool is backed by strong community support with extensive documentation, forums, and user-contributed scripts.
Compatibility
Shorewall is highly compatible with Linux-based systems and leverages netfilter/iptables which is built into the Linux kernel.
Promote Shorewall. You can add any of these badges on your website.
We have collected here some useful links to help you find out if Shorewall is good.
Check the traffic stats of Shorewall on SimilarWeb. The key metrics to look for are: monthly visits, average visit duration, pages per visit, and traffic by country. Moreoever, check the traffic sources. For example "Direct" traffic is a good sign.
Check the "Domain Rating" of Shorewall on Ahrefs. The domain rating is a measure of the strength of a website's backlink profile on a scale from 0 to 100. It shows the strength of Shorewall's backlink profile compared to the other websites. In most cases a domain rating of 60+ is considered good and 70+ is considered very good.
Check the "Domain Authority" of Shorewall on MOZ. A website's domain authority (DA) is a search engine ranking score that predicts how well a website will rank on search engine result pages (SERPs). It is based on a 100-point logarithmic scale, with higher scores corresponding to a greater likelihood of ranking. This is another useful metric to check if a website is good.
The latest comments about Shorewall on Reddit. This can help you find out how popualr the product is and what people think about it.
All mentioned items have side-channel borked firewall and route rules in the past. Some bugs intermittently silently block local daemon instances from (re)loading like magic (some bugs only happen when the system is brought up). If your daily tasks include something less borked, than consider yourself very lucky you live without systemd. If I recall, ufw was intended for simple workstation rule sets. Personally,... - Source: Hacker News / about 3 years ago
I've been using Shorewall for the last decade or so on everything from custom OpenWRT firewall/gateway solutions to servers running Debian or Ubuntu. It's great software that makes managing iptables/netfilter a breeze. Alas after many years, Mr. Eastep has retired and it doesn't appear the project is maintained by a new person or team. Source: over 3 years ago
Shorewall (https://shorewall.org/) can do the job easily. Source: over 3 years ago
Despite administrating Linux machines since 1994, I have never really looked closely at iptables because I was using shorewall and the briefly firehol. Source: almost 4 years ago
You should just use https://shorewall.org/. Source: about 5 years ago
Currently, the firewall in place a software firewall, running shorewall on CentOS on a DELL server. This is not the standard of our company and we would like to replace this with a more traditional firewall. I've used Cisco ASA in the past and I was looking into getting one to replace our current firewall. Source: about 5 years ago
Do you know an article comparing Shorewall to other products?
Suggest a link to a post with product alternatives.
Is Shorewall good? This is an informative page that will help you find out. Moreover, you can review and discuss Shorewall here. The primary details have not been verified within the last quarter, and they might be outdated. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.
