Hi Matt, Happy to help out. Can you mention your shorewall-nft version? I will investigate your report, - building parity with the vast array of shorewall options is a bunch of work and testing. Also feel free to lodge bugs on github: https://github.com/sol1/shorewall-nft/issues
I'm also trying to keep this this authoritative: https://github.com/sol1/shorewall-nft/blob/main/docs/coverage.md but it is hard to cover all the combos available. Dave On Thu, 30 Jul 2026 at 04:26, Matt Darfeuille <[email protected]> wrote: > Hi there, > > I'm "shorewall check"ing my Iptables configs and bumps into the following: > > - SW Iptables supports > https://shorewall.org/configuration_file_basics.htm#INCLUDE but not SW > NFT. > E.G: "?INCLUDE sw-dmz.macaddresses" > > - Sw Iptables supports using > https://shorewall.org/manpages/shorewall-params.html > but not fully SW Nft, more specifically: "file is always processed by > /bin/sh so the full range of shell capabilities may be used.". > E.G: "VM_NET=$(awk -F, '/domain=/ && /vm/{print $2}' $DNSMASQ_CONF)" > > - SW Iptables supports > https://shorewall.org/manpages/shorewall-maclist.html but SW Nft does > not work without a MAC address: > E.G: "ACCEPT $VM_IF - 10.17.240.100,10.17.240.120-10.17.240.124" > > > I'mtesting SW-nft in a VM, built from source. > > -- > Matt Darfeuille > > > _______________________________________________ > Shorewall-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/shorewall-users >
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
