Shorewall Reviews and details

Social recommendations and mentions

• DHCP is not blocked by ufw/iptables

  All mentioned items have side-channel borked firewall and route rules in the past. Some bugs intermittently silently block local daemon instances from (re)loading like magic (some bugs only happen when the system is brought up). If your daily tasks include something less borked, than consider yourself very lucky you live without systemd. If I recall, ufw was intended for simple workstation rule sets. Personally,... - Source: Hacker News / 9 months ago

• Life After Shorewall: Replacement Options?

  I've been using Shorewall for the last decade or so on everything from custom OpenWRT firewall/gateway solutions to servers running Debian or Ubuntu. It's great software that makes managing iptables/netfilter a breeze. Alas after many years, Mr. Eastep has retired and it doesn't appear the project is maintained by a new person or team. Source: about 1 year ago

• Tunneling private networked host to the internet through public-facing server?

  Shorewall (https://shorewall.org/) can do the job easily. Source: over 1 year ago

• How to hairpin a whole network segment?

  Despite administrating Linux machines since 1994, I have never really looked closely at iptables because I was using shorewall and the briefly firehol. Source: over 1 year ago

• dog: An open source firewall management system for packs of firewalls (iptables)

  You should just use https://shorewall.org/. Source: almost 3 years ago

• Buying a new firewall for off-grid network

  Currently, the firewall in place a software firewall, running shorewall on CentOS on a DELL server. This is not the standard of our company and we would like to replace this with a more traditional firewall. I've used Cisco ASA in the past and I was looking into getting one to replace our current firewall. Source: almost 3 years ago