I think /etc/shorewall/init is the best place to do it, right ?
On Sat, Apr 25, 2015 at 7:22 PM, Guilsson . <[email protected]> wrote:
> Reading the docs I didn't realize I need to setup things outside Shorewall.
> Don't you mind make this information more explicit at documentation ?
>
> On Sat, Apr 25, 2015 at 1:00 PM, Tom Eastep <[email protected]> wrote:
>
>> On 4/24/2015 6:57 PM, Guilsson . wrote:
>> > I'm trying to use ipsets with Shorewall.
>> > I read CAREFULLY http://shorewall.net/ipsets.html
>> >
>> > I setup a very simple firewall with Shorewall 4.6.8 in a Fedora 17 with
>> > ipset installed.
>> > Two Interfaces (net and loc); simple policy masq interfaces zone.
>> >
>> > I went directly to try IPsets.
>> >
>> > Documentation says:
>> > ------------------------------------------------------------------------
>> >
>> > *Example 1*: Blacklist all hosts in an ipset named "blacklist"
>> >
>> > |/etc/shorewall/blacklist|
>> >
>> > #ADDRESS/SUBNET PROTOCOL PORT
>> > +blacklist
>> >
>> > ------------------------------------------------------------------------
>> > Question 1: Do I define ipset "blacklist" inside a file with the same
>> name ?
>> >
>> >
>>
>> No.
>>
>> >
>> >
>> > Documentation says:
>> > ------------------------------------------------------------------------
>> >
>> > *Example 2*: Allow SSH from all hosts in an ipset named "sshok:
>> >
>> > |/etc/shorewall/rules|
>> >
>> > #ACTION SOURCE DEST PROTO DEST PORT(S)
>> > ACCEPT net:+sshok $FW tcp 22
>> >
>> > ------------------------------------------------------------------------
>> > Question 2: Where a define the hosts of "sshok" ?
>>
>> All ipset content management is done through the ipset utility.
>>
>> -Tom
>> --
>> Tom
>> Tom Eastep
>> http://www.shorewall.net
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> One dashboard for servers and applications across Physical-Virtual-Cloud
>> Widest out-of-the-box monitoring support with 50+ applications
>> Performance metrics, stats and reports that give you Actionable Insights
>> Deep dive visibility with transaction tracing using APM Insight.
>> http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
>> _______________________________________________
>> Shorewall-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>>
>>
>
------------------------------------------------------------------------------
One dashboard for servers and applications across Physical-Virtual-Cloud
Widest out-of-the-box monitoring support with 50+ applications
Performance metrics, stats and reports that give you Actionable Insights
Deep dive visibility with transaction tracing using APM Insight.
http://ad.doubleclick.net/ddm/clk/290420510;117567292;y
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
