Ubuntu Manpage: shorewall-lite.conf - Shorewall Lite global configuration file

Provided by: shorewall-lite_4.2.10-1_all

NAME

       shorewall-lite.conf - Shorewall Lite global configuration file

SYNOPSIS

       /etc/shorewall-lite/shorewall-lite.conf

DESCRIPTION

       This file sets options that apply to Shorewall Lite as a whole.

       The file consists of Shell comments (lines beginning with ´#´), blank
       lines and assignment statements (variable=value). Each variable´s
       setting is preceded by comments that describe the variable and it´s
       effect.

       Any option not specified in this file gets its value from the
       shorewall.conf file used during compilation of
       /var/lib/shorewall-lite/firewall. Those settings may be found in the
       file /var/lib/shorewall-lite/firewall.conf.

OPTIONS

       The following options may be set in shorewall.conf.

       IPTABLES=[pathname]
           This parameter names the iptables executable to be used by
           Shorewall. If not specified or if specified as a null value, then
           the iptables executable located using the PATH option is used.

       LOGFILE=[pathname]
           This parameter tells the /sbin/shorewall program where to look for
           Shorewall messages when processing the dump, logwatch, show log,
           and hits commands. If not assigned or if assigned an empty value,
           /var/log/messages is assumed.

       LOGFORMAT=["formattemplate"]
           The value of this variable generate the --log-prefix setting for
           Shorewall logging rules. It contains a “printf” formatting template
           which accepts three arguments (the chain name, logging rule number
           (optional) and the disposition). To use LOGFORMAT with fireparse,
           set it as:

                   LOGFORMAT="fp=%s:%d a=%s "
           If the LOGFORMAT value contains the substring “%d” then the logging
           rule number is calculated and formatted in that position; if that
           substring is not included then the rule number is not included. If
           not supplied or supplied as empty (LOGFORMAT="") then
           “Shorewall:%s:%s:” is assumed.

       PATH=pathname[:pathname]...
           Determines the order in which Shorewall searches directories for
           executable files.

       RESTOREFILE=[filename]
           Specifies the simple name of a file in /var/lib/shorewall to be
           used as the default restore script in the shorewall save, shorewall
           restore, shorewall forget and shorewall -f start commands.

       SHOREWALL_SHELL=[pathname]
           This option is used to specify the shell program to be used to run
           the Shorewall compiler and to interpret the compiled script. If not
           specified or specified as a null value, /bin/sh is assumed. Using a
           light-weight shell such as ash or dash can significantly improve
           performance.

       SUBSYSLOCK=[pathname]
           This parameter should be set to the name of a file that the
           firewall should create if it starts successfully and remove when it
           stops. Creating and removing this file allows Shorewall to work
           with your distribution´s initscripts. For RedHat, this should be
           set to /var/lock/subsys/shorewall. For Debian, the value is
           /var/state/shorewall and in LEAF it is /var/run/shorwall.

       VERBOSITY=[number]
           Shorewall has traditionally been very noisy (produced lots of
           output). You may set the default level of verbosity using the
           VERBOSITY OPTION.

           Values are:

               0 - Silent. You may make it more verbose using the -v
                           option

               1 - Major progress messages displayed

               2 - All progress messages displayed (old default
                           behavior) If not specified, then 2 is assumed.

FILES

       /etc/shorewall-lite/shorewall.conf

Ubuntu manuals

NAME

SYNOPSIS

DESCRIPTION

OPTIONS

FILES

SEE ALSO