1SHOREWALL-ROUTESTOP(5)          [FIXME: manual]         SHOREWALL-ROUTESTOP(5)
2
3
4

NAME

6       routestopped - The Shorewall file that governs what traffic flows
7       through the firewall while it is in the 'stopped' state.
8

SYNOPSIS

10       /etc/shorewall/routestopped
11

DESCRIPTION

13       This file is used to define the hosts that are accessible when the
14       firewall is stopped or is being stopped.
15
16           Warning
17           Changes to this file do not take effect until after the next
18           shorewall start or shorewall restart command.
19
20       The columns in the file are as follows.
21
22       INTERFACE - interface
23           Interface through which host(s) communicate with the firewall
24
25       HOST(S) (Optional) - [-|address[,address]...]
26           Comma-separated list of IP/subnet addresses. If your kernel and
27           iptables include iprange match support, IP address ranges are also
28           allowed.
29
30           If left empty or supplied as "-", 0.0.0.0/0 is assumed.
31
32       OPTIONS (Optional) - [-|option[,option]...]
33           A comma-separated list of options. The order of the options is not
34           important but the list can contain no embedded whitespace. The
35           currently-supported options are:
36
37           routeback
38               Set up a rule to ACCEPT traffic from these hosts back to
39               themselves. Beginning with Shorewall 4.4.9, this option is
40               automatically set if routeback is specified in
41               shorewall-interfaces[1] (5) or if the rules compiler detects
42               that the interface is a bridge.
43
44           source
45               Allow traffic from these hosts to ANY destination. Without this
46               option or the dest option, only traffic from this host to other
47               listed hosts (and the firewall) is allowed. If source is
48               specified then routeback is redundant.
49
50           dest
51               Allow traffic to these hosts from ANY source. Without this
52               option or the source option, only traffic from this host to
53               other listed hosts (and the firewall) is allowed. If dest is
54               specified then routeback is redundant.
55
56           notrack
57               The traffic will be exempted from conntection tracking.
58
59       PROTO (Optional) – protocol-name-or-number
60           Protocol.
61
62       DEST PORT(S) (Optional) – service-name/port-number-list
63           A comma-separated list of port numbers and/or service names from
64           /etc/services. May also include port ranges of the form
65           low-port:high-port if your kernel and iptables include port range
66           support.
67
68       SOURCE PORT(S) (Optional) – service-name/port-number-list
69           A comma-separated list of port numbers and/or service names from
70           /etc/services. May also include port ranges of the form
71           low-port:high-port if your kernel and iptables include port range
72           support.
73
74           Note
75           The source and dest options work best when used in conjunction with
76           ADMINISABSENTMINDED=Yes in shorewall.conf[2](5).
77

EXAMPLE

79       Example 1:
80
81                       #INTERFACE      HOST(S)                 OPTIONS         PROTO          DEST       SOURCE
82                       #                                                                      PORT(S)    PORT(S)
83                       eth2            192.168.1.0/24
84                       eth0            192.0.2.44
85                       br0             -                       routeback
86                       eth3            -                       source
87                       eth4            -                       notrack        41
88

FILES

90       /etc/shorewall/routestopped
91

SEE ALSO

93       http://shorewall.net/starting_and_stopping_shorewall.htm
94
95       shorewall(8), shorewall-accounting(5), shorewall-actions(5),
96       shorewall-blacklist(5), shorewall-hosts(5), shorewall_interfaces(5),
97       shorewall-ipsets(5), shorewall-maclist(5), shorewall-masq(5),
98       shorewall-nat(5), shorewall-netmap(5), shorewall-params(5),
99       shorewall-policy(5), shorewall-providers(5), shorewall-proxyarp(5),
100       shorewall-route_rules(5), shorewall-rules(5), shorewall.conf(5),
101       shorewall-secmarks(5), shorewall-tcclasses(5), shorewall-tcdevices(5),
102       shorewall-tcrules(5), shorewall-tos(5), shorewall-tunnels(5),
103       shorewall-zones(5)
104

NOTES

106        1. shorewall-interfaces
107           http://www.shorewall.net/manpages/shorewall-interfaces.html
108
109        2. shorewall.conf
110           http://www.shorewall.net/manpages/shorewall.conf.html
111
112
113
114[FIXME: source]                   09/16/2011            SHOREWALL-ROUTESTOP(5)