1SHOREWALL-MACLIST(5)          Configuration Files         SHOREWALL-MACLIST(5)
2
3
4

NAME

6       maclist - Shorewall MAC Verification file
7

SYNOPSIS

9       /etc/shorewall[6]/maclist
10

DESCRIPTION

12       This file is used to define the MAC addresses and optionally their
13       associated IP addresses to be allowed to use the specified interface.
14       The feature is enabled by using the maclist option in the
15       shorewall-interfaces[1](5) or shorewall-hosts[2](5) configuration file.
16
17       The columns in the file are as follows (where the column name is
18       followed by a different name in parentheses, the different name is used
19       in the alternate specification syntax).
20
21       DISPOSITION - {ACCEPT|DROP|REJECT}[:log-level]
22           ACCEPT or DROP (if MACLIST_TABLE=filter in shorewall.conf[3](5),
23           then REJECT is also allowed). If specified, the log-level causes
24           packets matching the rule to be logged at that level.
25
26       INTERFACE - interface
27           Network interface to a host.
28
29       MAC - address
30           MAC address of the host -- you do not need to use the Shorewall
31           format for MAC addresses here. If IP ADDRESSES is supplied then MAC
32           can be supplied as a dash (-)
33
34       IP ADDRESSES (addresses) - [address[,address]...]
35           Optional - if specified, both the MAC and IP address must match.
36           This column can contain a comma-separated list of host and/or
37           subnet addresses. If your kernel and iptables have iprange match
38           support then IP address ranges are also allowed. Similarly, if your
39           kernel and iptables include ipset support than set names (prefixed
40           by "+") are also allowed.
41

FILES

43       /etc/shorewall/maclist
44
45       /etc/shorewall6/maclist
46

SEE ALSO

48       http://www.shorewall.net/MAC_Validation.html[4]
49
50       http://www.shorewall.net/configuration_file_basics.htm#Pairs[5]
51
52       shorewall(8)
53

NOTES

55        1. shorewall-interfaces
56           http://www.shorewall.net/manpages/shorewall-interfaces.html
57
58        2. shorewall-hosts
59           http://www.shorewall.net/manpages/shorewall-hosts.html
60
61        3. shorewall.conf
62           http://www.shorewall.net/manpages/shorewall.conf.html
63
64        4. http://www.shorewall.net/MAC_Validation.html
65           http://www.shorewall.net/MAC_Validation.html
66
67        5. http://www.shorewall.net/configuration_file_basics.htm#Pairs
68           http://www.shorewall.net/configuration_file_basics.htm#Pairs
69
70
71
72Configuration Files               01/17/2019              SHOREWALL-MACLIST(5)
Impressum