(The Shoreline Firewall) is an iptables based firewall Requires the Shorewall package and adds the capability to create an IPv6 firewall.
| providers.annotated (shorewall6-5.2.3.6.tar.bz2) | : | providers.annotated (shorewall6-5.2.6.tar.bz2) |
|---|
| # | | # |
| # Shorewall6 -- /etc/shorewall6/providers | | # Shorewall6 -- /etc/shorewall6/providers |
| # | | # |
| # For information about entries in this file, type "man shorewall6-providers" | | # For information about entries in this file, type "man shorewall6-providers" |
| # | | # |
|
| # For additional information, see http://shorewall.net/MultiISP.html | | # For additional information, see https://shorewall.org/MultiISP.html |
| # | | # |
| ################################################################################
############ | | ################################################################################
############ |
| # | | # |
| # This file is used to define additional routing tables. You will want to define | | # This file is used to define additional routing tables. You will want to define |
| # an additional table if: | | # an additional table if: |
| # | | # |
| # • You have connections to more than one ISP or multiple connections to the | | # • You have connections to more than one ISP or multiple connections to the |
| # same ISP | | # same ISP |
| # | | # |
| # • You run Squid as a transparent proxy on a host other than the firewall. | | # • You run Squid as a transparent proxy on a host other than the firewall. |
| | |
| skipping to change at line 189 | | skipping to change at line 189 |
|---|
| # mtu=number | | # mtu=number |
| # | | # |
| # Specifies the MTU when forwarding through this provider. If not given, | | # Specifies the MTU when forwarding through this provider. If not given, |
| # the MTU of the interface named in the INTERFACE column is assumed. | | # the MTU of the interface named in the INTERFACE column is assumed. |
| # | | # |
| # fallback[=weight] | | # fallback[=weight] |
| # | | # |
| # Indicates that a default route through the provider should be added to | | # Indicates that a default route through the provider should be added to |
| # the default routing table (table 253). If a weight is given, a balance
d | | # the default routing table (table 253). If a weight is given, a balance
d |
| # route is added with the weight of this provider equal to the specified | | # route is added with the weight of this provider equal to the specified |
|
| # weight. If the option is given without a weight, an separate default | | # weight. If the option is given without a weight, a separate default |
| # route is added through the provider's gateway; the route has a metric | | # route is added through the provider's gateway; the route has a metric |
| # equal to the provider's NUMBER. | | # equal to the provider's NUMBER. |
| # | | # |
| # Prior to Shorewall 4.4.24, the option is ignored with a warning messag
e | | # Prior to Shorewall 4.4.24, the option is ignored with a warning messag
e |
| # if USE_DEFAULT_RT=Yes in shorewall.conf. | | # if USE_DEFAULT_RT=Yes in shorewall.conf. |
| # | | # |
| # Caution | | # Caution |
| # | | # |
| # In IPV6, specifying the fallback option on multiple providers does not | | # In IPV6, specifying the fallback option on multiple providers does not |
| # cause balanced fallback routes to be created; it rather causes a | | # cause balanced fallback routes to be created; it rather causes a |
| # sequence of fallback routes with different metrics to be created. | | # sequence of fallback routes with different metrics to be created. |
| # | | # |
| # tproxy | | # tproxy |
| # | | # |
| # Added in Shorewall 4.5.4. Used for supporting the TPROXY action in | | # Added in Shorewall 4.5.4. Used for supporting the TPROXY action in |
|
| # shorewall-mangle(5). See http://www.shorewall.net/ | | # shorewall-mangle(5). See https://shorewall.org/ |
| # Shorewall_Squid_Usage.html. When specified, the MARK, DUPLICATE and | | # Shorewall_Squid_Usage.html. When specified, the MARK, DUPLICATE and |
| # GATEWAY columns should be empty, INTERFACE should be set to 'lo' and | | # GATEWAY columns should be empty, INTERFACE should be set to 'lo' and |
| # tproxy should be the only OPTION. Only one tproxy provider is allowed. | | # tproxy should be the only OPTION. Only one tproxy provider is allowed. |
| # | | # |
| # hostroute | | # hostroute |
| # | | # |
| # Added in Shorewall 4.5.21. This is the default behavior that results i
n | | # Added in Shorewall 4.5.21. This is the default behavior that results i
n |
| # a host route to the defined GATEWAY being inserted into the main | | # a host route to the defined GATEWAY being inserted into the main |
| # routing table and into the provider's routing table. hostroute is | | # routing table and into the provider's routing table. hostroute is |
| # required for older distributions but nohostroute (below) is appropriat
e | | # required for older distributions but nohostroute (below) is appropriat
e |
| | | |
| End of changes. 3 change blocks. |
|---|
| 3 lines changed or deleted | | 3 lines changed or added |
|---|
"Fossies" - the Fresh Open Source Software Archive 