Questions tagged [shorewall]

high-level tool for configuring the Linux Netfilter packet filter

40 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2 votes
0 answers
670 views

Kubernetes and iptables not mixing: connection content dropped?

I'm playing around with a bare-metal Kubernetes cluster (using the calico CNI plugin) and having troubles redirecting external traffic into the node. I've set up the nginx kubernetes ingress ...
kestrel's user avatar
  • 163
1 vote
1 answer
452 views

OpenVPN client fails to re-connect after internet connection re-established

I'm running miniPC with Debian and shorewall on it + and OpenVPN client. All is running smoothly unless my isp modem loses connection. After the connection to the internet is re-established, the ...
zwadar's user avatar
  • 11
1 vote
0 answers
242 views

Diagnosing / monitoring HTB or HFSC traffic shaping

I have set up a central Linux router with Shorewall script for a small company that have a HQ and several other offices. They're connected via OpenVPN. All is well, except that I want to fine tune ...
Neferkat's user avatar
1 vote
0 answers
96 views

Shorewall masquerade on dynamic interface

I have a list of interfaces to which I want to masquerade traffic to. The problem is only one of them is active at once. They all match the regex vlan14[0-9][0-9]. How can I get shorewall to ...
Dessa Simpson's user avatar
1 vote
0 answers
49 views

Shorewall multiple outgoing IPs allocation

I have perfectly working VPN server with Shorewall installed. I got more IPs for the main eth0 interface so the server accepts the VPN connection from any of x.x.x.x/25 public IPs. But, the issue is ...
Maks Shevchenko's user avatar
1 vote
1 answer
811 views

Shorewall blocks openvpn traffic?

I have a debian installation with shorewall, openvpn and google authenticator. I can get an vpn connection - but i cannot get any traffic through to local Lan or to internet - what am I missing here: ...
user1621015's user avatar
1 vote
0 answers
679 views

Shorewall reporting martians

Running Shorewall v5.0.14.1 on Fedora Server 4.8.15-200.fc24.x86_64 configured with two interfaces (br0 and team0). Interface br0 connects to Internet while the team0 interface connects wireless ...
FlashL's user avatar
  • 11
1 vote
0 answers
96 views

How to ensure via shorewall that the network is closed at boot time?

I use Shorewall (on Ubuntu 16.04) and would like to ensure that between the start of the boot process and the moment iptables rules are applied the network is in a closed state. There provision for ...
WoJ's user avatar
  • 3,657
1 vote
0 answers
209 views

Selinux: Shorewall will not respond to fail2ban

I am using fail2ban with shorewall and my Fedora 21 server & cloud. All flooded with the following error message: SELinux is preventing shorewall from write access on the file /tmp/fai2ban*.[...
raratiru's user avatar
  • 111
1 vote
0 answers
690 views

shorewall can'T start: UNTRACKED state requires Raw Table in your kernel and iptables

I'm trying setting up my firewall and installed and configured shorewall. Unfortunately I tried to directly configure iptables first, but this didn't work. When I start shorewall, I get this messages ...
sedrubal's user avatar
  • 123
1 vote
0 answers
913 views

Shorewall: DNAT to IPSEC tunnel zone not routing correctly

I have a ipsec tunnel working that gives access to a 192.168.4.0/24 lan. It is working fine and I can access hosts on the other side without problem: # from fw and lan hosts: # ping 192.168.4.44 PING ...
Lluís's user avatar
  • 425
1 vote
0 answers
1k views

Firewall rejecting UDP "connections"?

I have a server that is aggregating logs from various other servers. It mostly works great, however from time-to-time (right after a reboot, but not all reboots) it will decide that various UDP "...
Kromey's user avatar
  • 3,681
1 vote
0 answers
2k views

Shorewall redirect rule only working for some hosts in the same network

I'm trying to use Shorewall's REDIRECT action to intercept traffic destined for the firewall's port 514 (TCP and UDP) to port 5000 (also TCP and UDP), while also allowing direct traffic to the latter ...
Kromey's user avatar
  • 3,681
1 vote
0 answers
544 views

Send traffic over a specific port through a specific interface, using Shorewall

I have an application that does not support binding to a different interface. It currently sends outgoing connections over eth0, but I would like to send it over eth0:1 which is a virtual interface. ...
Argure's user avatar
  • 56
1 vote
0 answers
262 views

Shorewall SHOW DYNAMIC command doesn't work

Setting up shorewall dynamic zones, http://shorewall.net/Dynamic.html shows the command shorewall show dynamic zone where zone is one of your zones. I can get the add and delete commands to work, but ...
ErebusBat's user avatar
  • 935
1 vote
1 answer
714 views

virtualbox port forwarding - firewall config

i have a ubuntu host system with virtualbox running a windows server. In Virtualbox i have configured the network with a NAT interface and port forwarding for the RDP deamon running inside the vm. ...
Roose's user avatar
  • 19
1 vote
1 answer
218 views

Linux Router - Share bandwidth per IPs with current active connections

We have a Linux machine running as a custom router, currently utilising Shorewall. This sits between our incoming internet connection and the internal LAN. What we would like to achieve is 'fair use'...
Stephen Roe's user avatar
1 vote
0 answers
110 views

shorewall prevents routing from protected zone entities to other protected zone entities

I'm using shorewall as the firewall and gateway for a production site. The site also has a couple of VPNs running into it that are hosted on a different server on the same site (in the protected zone)....
Guss's user avatar
  • 2,800
1 vote
0 answers
310 views

Multi-ISP firewall setup

We have been trying to move away from a SonicWall firewall for quite some time now. Through much Googling and many hours of trial and error, we have met varying degrees of success through different ...
miquella's user avatar
  • 250
0 votes
1 answer
381 views

Configuring shorewall's masq file for a three-interface firewall connected to a router with a single static IP address

I am trying to follow the guide for setting up a "three-Interface Firewall" running Shorewall version 5.0.4. (https://shorewall.org/three-interface.htm). I also have a Procurve switch that ...
Paul Ryan's user avatar
0 votes
0 answers
160 views

Shorewall - One external IP for two hosts with nginx and keepalived

I'm following this tutorial to setup keepalived: https://www.redhat.com/sysadmin/keepalived-basics It requires two hosts to share one external IP, where the second host is the failover. I'm unsure how ...
Angus's user avatar
  • 37
0 votes
1 answer
528 views

How to uninstall shorewall completely from Ubuntu

I noticed on my some servers shorewall service is installed but it's not running.I want to uninstall it. I executed the command sudo systemctl status shorewall to check status of shorewall and got the ...
rajeev singh's user avatar
0 votes
0 answers
151 views

virtmanager: install via debian netinstall, reboot find not boot device, recovery mode can access

I used the virtmanager to create a virtual machine. The install medium is the debian netinstaller (Version 10, buster). Installation works without problems. Rebooting fails: no boot device found ...
Hamatoma's user avatar
0 votes
1 answer
243 views

in shorewall, how can I block requests from external hosts when using nested zones?

I have one Debian server with one network interface, I've configured a bridge for KVM and shorewall with two zones in the same interface so I have the "net" zone and the "kvm" for kvm guests, here is ...
Lluís's user avatar
  • 425
0 votes
0 answers
599 views

Shorewall blocking outbound traffic to one IP on a vpn tunnel

I'm trying to set up shorewall to block traffic to one particular IP address that is routed over an openvpn tunnel. Naively I have the following shorewall rules in place #Don't allow connection ...
Peter Nunn's user avatar
0 votes
1 answer
1k views

OpenVPN tunnel up but no traffic from LAN to VPN

The HeadOffice subnet is 192.168.2.0/24. OpenVPN server & shorewall on same box - acting as a gateway AWS subnet is 10.9.1.0/24. Openvpn Client configured for VPN access Tunnel is up and I can ...
Lucky Chingi's user avatar
0 votes
1 answer
40 views

Why is my ISP box talking to my DMZ host?

I have a setup where an internet connection is available via ISP box, which has a DMZ feature (one of the hosts can be exposed to Internet). The general setup is the following Internet - PublicIP - ...
WoJ's user avatar
  • 3,657
0 votes
0 answers
180 views

How do I get default LXC iptable rules into Shorewall?

I'm setting up a server which will be hosting multiple LXC containers. However, starting Shorewall results in loss network access from within the LXC containers. If I reboot the LXC host and leaves ...
sbrattla's user avatar
  • 1,600
0 votes
1 answer
354 views

Shorewall: Block repeatedly failling ips on port 22

I am on Fedora 21, and port 22 is open for ssh connections. I am using key-based authentication with password and root logins disabled. My logs are flooded with messages like the ones appended at ...
raratiru's user avatar
  • 111
0 votes
0 answers
1k views

Routing Traffic to Subnet through OpenVPN Client Tunnel

I have a Shorewall powered masquerading router: eth0: DHCP client, external interface (net zone) eth1: static, internal interface (loc zone) Now I want to add an OpenVPN client that creates a TUN ...
derabbink's user avatar
  • 261
0 votes
1 answer
517 views

HAProxy fails to connect when Shorewall firewall is enabled on web servers

I have a fairly standard HAProxy / Web Cluster setup, which is running perfectly fine - as long as I don't enable the Shorewall firewall on the web cluster servers. As soon as I do, error messages ...
josa's user avatar
  • 1
0 votes
1 answer
542 views

Expressing iptables rule as shorewall rule

I have been working with a Centos server for a while now. I have set 3 subnetworks in my LAN through alias networks (etho:o, eth0:1, etc). I have a sharer printer in one of those networks, and I would ...
rodrigocaicedo's user avatar
0 votes
1 answer
984 views

Sub-process /usr/bin/dpkg returned an error code (1)

Hey friends i am getting the following error when i am trying to purge shorewall root@aptosid:/etc# apt-get purge shorewall Reading package lists... Done Building dependency tree Reading ...
rohit's user avatar
  • 1
0 votes
1 answer
1k views

Track torrent traffic in shorewall

I use shorewall to configure my firewall. Is there anyway to track torrent traffic using shorewall accounting?
ian's user avatar
  • 131
0 votes
1 answer
934 views

Prevent Shorewall log entries for specific IP address and/or port

I have Shorewall firewall setup on a Debian server which is working fine. I get various log entries in /var/log/messages when packets are dropped, as expected, for example: Aug 17 19:09:07 cheetah ...
user442879's user avatar
0 votes
2 answers
519 views

Uploads fail with shorewall enabled

I have an Ubuntu 8.04 server with shorewall 4.0.6 installed. When I try to upload files using FTP, SCP, or cURL the file upload stalls almost immediatly and eventually times out. If I turn off ...
JamesArmes's user avatar
0 votes
1 answer
724 views

Shorewall Drops the IP

We are using shorewall on Linux server in our LAN environment. The Client machines using windows XP. When I try to connect to a remote machine( The remote machine has static IP) from my windows ...
Boby's user avatar
  • 1
0 votes
1 answer
2k views

Shorewall drop all incoming traffic from one internet IP except for all local host except two

How i can block all incoming traffic from one internet IP for the local network, except for two host? DROP all inet:78.31.8.0/24 - - The previous rule block all the ...
Peak's user avatar
  • 1
0 votes
1 answer
246 views

Shorewall Bridge

How do I create a rule Shorewall for bridging port 443 from eth0 to eth1?
Paisal's user avatar
  • 101
-1 votes
1 answer
264 views

bind9 not resolving intranetlinks

As a follow up to a question I've asked earlier: Linux server migration to Windows workstation. A supplier got us a new network-card yesterday, but no harddrives so far. I've also bit the bullet on ...
Clueless_captain's user avatar