**SUPPORT** Personal Firewall with Shorewall Tutorial

supernick_84 · n00b Joined: 22 Feb 2006 Posts: 2

I'm having trouble connecting to an FTP server with my laptop. I've installed shorewall on my desctop computer according to your HOWTO (which is very nice!) and it works fine there.

Could it be that the problem is that I have 2 interfaces?

Anyway, this is the error i get :

nagual · n00b Joined: 15 Jan 2006 Posts: 34

After following the tutorial, I get this

nagual · n00b Joined: 15 Jan 2006 Posts: 34

Should I just add in the REDIRECT? I am only trying to open port 80 on that box, since it just sits there and folds.

supernick_84 · n00b Joined: 22 Feb 2006 Posts: 2

did you define a zone in /etc/shorewall/zones ?

nagual · n00b Joined: 15 Jan 2006 Posts: 34

I'm pretty sure I did. I will post my configs when I get home.

davmonster · n00b Joined: 02 Mar 2006 Posts: 1

After following this personal internet firewall HOWTO I struggled for a bit trying to get bittorrent to work.

This is how I got it working:

/etc/shorewall/policy:

pressenter · n00b Joined: 06 Dec 2005 Posts: 48

I have such a problem with my shorewall:

patroy · n00b Joined: 14 Oct 2004 Posts: 60 Location: Vancouver BC

If you are using shorewall 3.x a few things have changed since the "tutorial" was written.
I'm still trying to figure them all out.
though that error was the fixed by adding the following to /etc/shorewall/zones

to_kallon · Tux's lil' helper Joined: 27 Oct 2004 Posts: 89

hello everyone.
sith great guide, thanks mate.
i've run into a problem, i've seen a few people post about it but nothing i've tried has worked. i hit a few of the upgrade problems everyone has mentioned, but once shorewall got started everything seemed ok, i could ssh in and out just like i wanted to. but it turned out that was the only thing i could do. i cannot ping servers/view webpages, which may be the central problem, i also cannot emerge anything. i get this error:

patroy · n00b Joined: 14 Oct 2004 Posts: 60 Location: Vancouver BC

I 've just recently set-up and configured my firewall via shorewall. I had numerous problems and figured them all out by going to the shorewall website and reading through almost all of their docs. I was having a problem with connecting to the net untill I changed my policy to

to_kallon · Tux's lil' helper Joined: 27 Oct 2004 Posts: 89

that seems to have done the trick. thanks!

arabis · Posted: Wed May 17, 2006 10:55 pm Post subject:

With my notebook, I want to be able to use a dialup connection with Shorewall. So far I succeeded, but recently after some update, when I start my laptop with no ethernet cable plugged in, I get:

iusebash · n00b Joined: 21 May 2006 Posts: 70

I am on the first part, and I am already stuck.

From tut:

NotQuiteSane · Posted: Mon Jul 17, 2006 7:42 am Post subject:

I'm trying to follow the guide, but am stuck on section 2. Since the kernel outline has changed since the guide was written, I'm a bit confused.

Here is what I have under "Networking"

NotQuiteSane · Posted: Wed Jul 19, 2006 4:47 am Post subject:

Found a gotcha. don't think it's been reported.

on my firewall, I have use flag "minimal" set. this needs to be deactivated for iproute2. putting it in package.use worked.

NQS
_________________
These opinions are mine, mine I say! Piss off and get your own.

As I see it -- An irregular blog, Improved with new location

To delete French language packs from system use 'sudo rm -fr /'

Netfeed · n00b Joined: 24 Jan 2004 Posts: 19

im getting this error when im trying to start shorewall

Beefrum · Apprentice Joined: 23 May 2006 Posts: 234

Re to netfeed:
Current iptables options in kernel-configuration are probably missing some abilities.
_________________

Give adaptive answers to unknown problems!

Netfeed · n00b Joined: 24 Jan 2004 Posts: 19

happyduck · n00b Joined: 24 Jul 2006 Posts: 1

Alchera · Posted: Wed Sep 06, 2006 6:29 am Post subject:

For any one needing a graphical guide to setting up their kernel for Shorewall: Kernel Configuration

More information: Ports Required for Various Services/Applications
Logging: Configuring a Separate Log for Shorewall Messages (ulogd)

NB: The above configuration works to keep Shorewall information out of /var/log/messages. My policy is below.

nabla² · Apprentice Joined: 17 May 2005 Posts: 272

Which ports do I have to open for printer which uses a print server. I configured cups with

Karim · Apprentice Joined: 13 Apr 2004 Posts: 218

Hi!

I tried to follow the tutorial with the latest kernel 2.6.19, but the network configuration har really changed a lot.
Is there an uptodate genkernel configuration guide anywhere?
Anyone has a useful pointer?

Thanks!
/Karim

manouchk · Posted: Sat Nov 10, 2007 5:34 am Post subject:

I was using firestarter for simplicity and because it can be use to dynamically accept connection but as it ends up behing unsecure, I had to switch, I tried kmyfirewall which was not very good for me (standart desktop configuration was not allowing traffic over loopback and kmyfirewall has almost no documentation etc...)
Well i ended up trying shorewall and well the documentation is good! ! (3 minutes to setup a standalone shorewall, loved that!)

I have some comment, I hope it is okay to post here?

I had 1 problem, I missed one thing from the first post of http://forums.gentoo.org/viewtopic-t-308153.html (Prompt and Powerful Personal Firewalling with Shorewall). I had to had one line in /etc/shorewall/zones
net ipv4

I mean with that instead of 3mn, it could have been 2mn30...

I also liked to use the "new" syntax of /etc/shorewall/rules :

trikolon · Posted: Sun Dec 16, 2007 12:02 am Post subject:

hi.
i have a server/home-router with 3 eth interfaces. eth0 is my lan with ip range 192.168.0.255, eth1 is connected with my dsl modem and eth2 is connected with my wlan-accesspoint with the subnet 192.168.1.255. lan and internet is working! but i cant ping from or to the eth2-net from or to lan nor surfing. the two subnets are not communicating and i cant enter the internet form the eth2 subnet.
here are my configs: