iptables Firewall Configuration Tool shorewall installation and usage instances

Shorewall is not a daemon program, it is a package to load iptables instructions, so please do not expect to use the ps-aux of such instructions to query its itinerary, the next part of each set of documents to explain the function and format.

In essence, Shorewall is the iptables configuration tool. Because Iptables's grammar is obscure, commands are numerous, difficult to remember and understand. So configure the firewall by configuring a relatively easy to understand shorewall, and then Shorewall automatically invoke iptables to complete the configuration.

First, download installation and Uninstall

1, download

Shorewall's official web site for http://www.shorewall.net, before the installation to download its original code program, address in http://www.shorewall.net/ Download.htm This page, you can choose a mirror platform to download, the author is to choose the site of the USA to download, into the screen, select a version you want to use, the latest version has been out to 3.2, its update speed is very fast, then install can

2. Anti-installation process

Tarball:

Please enter the following instructions in the original installation directory:

#./uninstall.sh

This command will remove all of the Shorewall's profiles.

Rpm:

#rpm-eshorewall

Second, edit the set file

After installation, it is necessary to set the various profiles before starting Shorewall.

1,/etc/shorewall/shorewall.conf

shorewall.conf This setup file is the most important file in the entire software configuration, there are many settings, if wrong, it is likely to cause Shorewall startup failure or error:

STARTUP_ENABLED=Yes

The default is no, and if you decide to use Shorewall to manage your firewall, it is strongly recommended that you set this option to Yes.

LOGFILE=/var/log/messages

Set the location of the record file, the default record file is messages this file, you can also specify a separate file to distinguish between firewalls and general messages, easy to control the situation faster than the wrong.