Dmitry Mityugov dmitry.mityugov at
Mon Oct 17 18:31:40 UTC 2005

On 10/17/05, Timothy A. Holmes <tholmes at> wrote:
> well to be honest, i need to learn more about firewalls, so i probably should go indepth, but for now im likely gonna just use firestarter just to get it done

In fact, it's pretty simple to use shorewall (and I believe it'll let
you do things that you can't do with firestarter). You just install
it, then go to
and fetch sample configuration files from it, then adapt them to your
needs like uncommenting "fw net accept" in /etc/shorewall/policy,
IP_FORWARDING=On, DISABLE_IPV6=No in /etc/shorewall/shorewall.conf if
you need a router like your other messages seem to indicate :-) , add
"ACCEPT loc fw" to /etc/shorewall/rules if you plan to install bind,
samba, or any other services for the local network on that machine,
change "startup" from 0 to 1 in /etc/default/shorewall - and AFAIK
that's all.

Dmitry Mityugov, St. Petersburg, Russia
I ignore all messages with confidentiality statements

"We live less by imagination than despite it" - Rockwell Kent, "N by E"

More information about the ubuntu-users mailing list