Reading the docs I didn't realize I need to setup things outside Shorewall.
Don't you mind make this information more explicit at documentation ?
On Sat, Apr 25, 2015 at 1:00 PM, Tom Eastep <[email protected]> wrote:
> On 4/24/2015 6:57 PM, Guilsson . wrote:
> > I'm trying to use ipsets with Shorewall.
> > I read CAREFULLY http://shorewall.net/ipsets.html
> >
> > I setup a very simple firewall with Shorewall 4.6.8 in a Fedora 17 with
> > ipset installed.
> > Two Interfaces (net and loc); simple policy masq interfaces zone.
> >
> > I went directly to try IPsets.
> >
> > Documentation says:
> > ------------------------------------------------------------------------
> >
> > *Example 1*: Blacklist all hosts in an ipset named "blacklist"
> >
> > |/etc/shorewall/blacklist|
> >
> > #ADDRESS/SUBNET PROTOCOL PORT
> > +blacklist
> >
> > ------------------------------------------------------------------------
> > Question 1: Do I define ipset "blacklist" inside a file with the same
> name ?
> >
> >
>
> No.
>
> >
> >
> > Documentation says:
> > ------------------------------------------------------------------------
> >
> > *Example 2*: Allow SSH from all hosts in an ipset named "sshok:
> >
> > |/etc/shorewall/rules|
> >
> > #ACTION SOURCE DEST PROTO DEST PORT(S)
> > ACCEPT net:+sshok $FW tcp 22
> >
> > ------------------------------------------------------------------------
> > Question 2: Where a define the hosts of "sshok" ?
>
> All ipset content management is done through the ipset utility.
>
> -Tom
> --
> Tom
> Tom Eastep
> http://www.shorewall.net
>
>
>
>
> ------------------------------------------------------------------------------
> One dashboard for servers and applications across Physical-Virtual-Cloud
> Widest out-of-the-box monitoring support with 50+ applications
> Performance metrics, stats and reports that give you Actionable Insights
> Deep dive visibility with transaction tracing using APM Insight.
> http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
>
------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
