<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Shorewall Requirements</title><link rel="stylesheet" href="html.css" type="text/css" /><meta name="generator" content="DocBook XSL Stylesheets V1.73.2" /></head><body><div class="article" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title"><a id="shorewall_prerequisites"></a>Shorewall Requirements</h2></div><div><div class="author"><h3 class="author"><span class="firstname">Tom</span> <span class="surname">Eastep</span></h3></div></div><div><p class="copyright">Copyright © 2001-2006 Thomas M Eastep</p></div><div><div class="legalnotice"><a id="id288224"></a><p>Permission is granted to copy, distribute and/or modify this
document under the terms of the GNU Free Documentation License, Version
1.2 or any later version published by the Free Software Foundation; with
no Invariant Sections, with no Front-Cover, and with no Back-Cover
Texts. A copy of the license is included in the section entitled
“<span class="quote"><a class="ulink" href="GnuCopyright.htm" target="_self">GNU Free Documentation
License</a></span>”.</p></div></div><div><p class="pubdate">2008/12/15</p></div></div><hr /></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="section"><a href="#Requirements">Shorewall Requires:</a></span></dt><dt><span class="section"><a href="#Perl">Shorewall-perl Requirements</a></span></dt></dl></div><div class="caution" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Caution</h3><p><span class="bold"><strong>This article applies to Shorewall 3.0 and
later. If you are running a version of Shorewall earlier than Shorewall
3.0.0 then please see the documentation for that
release.</strong></span></p></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="Requirements"></a>Shorewall Requires:</h2></div></div></div><div class="itemizedlist"><ul type="disc"><li><p>A <span class="bold"><strong>Linux</strong></span> kernel that supports
Netfilter (No, it won't work on BSD or Solaris). I've tested with
2.4.2 - 2.6.16. Check <a class="ulink" href="kernel.htm" target="_self">here</a> for kernel
configuration information.</p></li><li><p>iptables 1.2 or later (but I recommend at least version
1.3.3)</p></li><li><p>Iproute (“<span class="quote">ip</span>” and "tc" utilities). The iproute
package is included with most distributions but may not be installed
by default. The official download site is <a class="ulink" href="http://developer.osdl.org/dev/iproute2/download/" target="_self">http://developer.osdl.org/dev/iproute2/download/</a>.</p></li><li><p>A Bourne shell or derivative such as bash or ash. This shell
must have correct support for variable expansion formats
${<span class="emphasis"><em>variable%pattern</em></span>},
${<span class="emphasis"><em>variable%%pattern</em></span>},
${<span class="emphasis"><em>variable#pattern</em></span>} and
${<span class="emphasis"><em>variable##pattern</em></span>}.</p></li><li><p>Your shell must produce a sensible result when a number n (128
<= n <= 255) is left shifted by 24 bits. You can check this at a
shell prompt by:</p><div class="itemizedlist"><ul type="circle"><li><p>echo $((128 << 24))</p></li><li><p>The result must be either 2147483648 or
-2147483648.</p></li></ul></div></li><li><p>The firewall monitoring display is greatly improved if you have
awk (gawk) installed.</p></li></ul></div></div><div class="section" lang="en" xml:lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="Perl"></a>Shorewall-perl Requirements</h2></div></div></div><p><a class="ulink" href="Shorewall-perl.html" target="_self">Shorewall-perl</a> is a
re-implementation of the Shorewall configuration compiler written in Perl.
It is much faster than the classic Shorewall-shell compiler and produces a
firewall script that runs much faster. It's prerequisites are described in
<a class="ulink" href="Shorewall-perl.html#Prerequisites" target="_self">the Shorewall-perl
article</a>.</p></div></div></body></html>
