[email protected] wrote: >When I look at examples in "raw" iptables code I can see how to do >inbound-only and outbound-only rules. > >I'd use > > iptables -i eth0 ... > >or > > iptables -o eth0 ... > >How do you do the same thing in Shorewall?
In general you don't. In shorewall, you normally specify rules in terms of zones (as is normal on most firewalls). So you map interface(s) to zones, and then use zones in your rules - and there may be more than one interface in a zone. So for example, you would write a rule : HTTP/ACCEPT net dmz:$webserver to allow HTTP traffic inbound to a webserver in the DMZ. Shorewall will take care of mapping zones to interfaces in iptables rules. ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_mar _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
