Jan 07, 2015
OpenWrt Project: Firewall Builder: Shorewall-lite Since mid 2015, Shorewall-lite is no longer offered as an installable package in OpenWrt. This document details installing Shorewall-lite on recent (2015+) OpenWrt routers. While this procedure is unlike the standard OpenWrt opkg method, the Shorewall-lite installation is very lightweight and easy. IPv6 – logging and shorewall6 « ipsidixit.net If you are implementing IPv6 with shorewall6, ulog cannot be used for logging. You must either go back to the crude-but-efective use of syslog or go forward to NFLOG / ulogd2. Implementing ulogd2 is not entirely trivial, since it is not yet a pre-built package for Ubuntu. ShorewallBasics - Community Help Wiki Jan 03, 2012 shorewall.conf: Shorewall global configuration file
Linux Configure Firewall Using Shorewall Under RHEL
4.6.0.3 is now available for download. Problems Corrected: 1) The Shorewall-init package now installs correctly on RHEL7. 2) 1:1 NAT is now enabled in IPv6. 3) A subtle interaction between NAT and sub-zones is explained in shorewall-nat. 4) The 'show filters' command now works with Simple TC. Thank you for using Shorewall. IPv6 Dynamic Prefix | Weberblog.net Here is an example of how I used OSPFv3 for IPv6 between my VPN endpoints. In detail, I have a home office with a dual stack ISP connection. However, this connection has a dynamic IPv6 prefix: After every reboot or lost connection of the firewall, I get a new IPv6 prefix. This is really bad for building a site-to-site VPN to the headquarter.
I have looked at the usual suspects pfsense, vyos, ClearOS and untangle. None of them provide an easy NAT64+DNS64 solution. RDNSS support would be
shorewall-rules Use with IPv6 requires Shorewall 4.5.14 or later. DNAT-Advanced users only. Like DNAT but only generates the DNAT iptables rule and not the companion ACCEPT rule. Use with IPv6 requires Shorewall 4.5.14 or later. DROP. Ignore the request. DROP! shorewall-tunnels IPv6 Example 1: IPSec tunnel. The remote gateway is 2001:cec792b4:1::44. The tunnel does not use the AH protocol. #TYPE ZONE GATEWAY ipsec:noah net 2002:cec792b4:1::44 IPv6 Example 2: Road Warrior (LapTop that may connect from anywhere) where the "gw" zone is used to represent the remote LapTop