similar to: RE: [Shorewall-announce] Samples and Quick Start Guide

At Tom Eastep''s request, an informal Shorewall Documentation Support = Group (DSG) is hoping to relieve some of the writing and editing burdens = that come with maintaining and improving the Shorewall documentation. = The DSG welcomes and needs your suggestions and contributions about all = aspects of the documentation, including structure, content, references, = style, grammar --

Attached is file "QSG-issues-1.0.txt" containing a numbered and commented list of issues collected from contributors and recent lists activity. It might be cool to have these issues in some spiffy issue tracking system like RT or something, but for a low tech start it''ll probably suffice. COMMENTS - IMHO (no particular order): I have searched the archives for additional

On April 26, I announced that I would no longer be supporting the Quick Start Guide and Sample configurations. Since both continue to be either wrong or out of date, all links to the Quick Start Guide have been removed from the Shorewall web site until further notice. -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \

On Sat, 15 Jun 2002, Ron Shannon wrote: > > I am ready to begin the documentation changes for 1.3.2. Are > > you close to > > having any of your changes ready for release? If so, we can > > get those into > > CVS before I begin my changes -- if not, then I''ll go ahead > > and update CVS > > with the 1.3.2 material. > > > >

On Fri, 26 Apr 2002, Ron Shannon wrote: > All points agreed. > > As you suggest, the docs are better if they''re a well-integrated set. If > a choice is made to exclude an advanced subject or level of detail from > the QSG, they should be covered elsewhere. As noted before, the docs as > a whole are exceptionally good. Your extra effort on the docs certainly > shows

As most of you already know, I have decided to terminate my involvement with the Shorewall project. Many of you have written to me expressing concern about the future of Shorewall and some of you have offered to help in various ways. I''m sending this post to assure you that Shorewall is not going away and that capable people are commited to ensuring that Shorewall continues. Paul Gear

Version 1.0 of the Quick Start Guide and accompanying sample configurations is available at: http://www.shorewall.net/shorewall_quickstart_guide.htm. Comments and suggestions are most welcome. Thanks, -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ teastep@shorewall.net

IMHO, our big picture challenge is that multiple explanations for several topics are spread out over several different docs and pages One parameter is frequently discussed in four or more places (QSG, files reference pages, file comments, main documentation, etc.) That gives multiple perspectives, which can be good, but can also lead to at least the appearance, especially to a beginner, of

Thanks to Fabien Luciole, there is now a French version of the Shorewall Setup Guide (http://shorewall.net/shorewall_setup_guide_fr.htm). Thanks Fabien!!! -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

Ron and Steve, I am ready to begin the documentation changes for 1.3.2. Are you close to having any of your changes ready for release? If so, we can get those into CVS before I begin my changes -- if not, then I''ll go ahead and update CVS with the 1.3.2 material. Please let me know. -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net

On Wed, 5 Jun 2002, Ron Shannon wrote: > Bummer. Will the robots.txt handle it? (http://httpd.apache.org/docs/misc/howto.html#stoprob) > Nope -- most of the offending bots just ignore robots.txt. The CVS interface is still available at: http://www.shorewall.net/cgi-bin/cvsweb.cgi There is just no link to it from the index. -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM:

FYI... ---------- Forwarded Message ---------- Subject: RE: [Shorewall-users] 2.6 kernel ipsec and shorewall Date: Thursday 23 September 2004 07:44 From: "Jonathan Schneider" <jon@clearconcepts.ca> To: "''Tom Eastep''" <teastep@shorewall.net> I must have been up too late working on this, looking at it the next day I noticed I completely forgot

Adam Chapman wrote: > > If I can show that the problem exists from the shorewall startup script > are you interested in the problem then? > I have replied to Adam off-list about this but let me say publicly that I don''t believe that this can be solved in the init scripts in any general way. Adam says: > I''d like to not have to rely on a domain name to get

Hi I have 2nic firewall . I had to open some ranges of udp and tcp ports . I faced a problem that although all the ports are open Some functionality was not working . Any body used shorewall with H323 Voip traffic DNATed . Any help is appretiated . Thanks ----- Original Message ----- From: <shorewall-users-request@lists.shorewall.net> To: <shorewall-users@lists.shorewall.net> Sent:

This is becoming a FAQ and should probably be added to the docs. Thanks, -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ teastep@shorewall.net ---------- Forwarded message ---------- Date: Sun, 28 Apr 2002 16:09:01 -0700 (Pacific Daylight Time) From: Tom Eastep <teastep@shorewall.net> To: Carl Spelkens

---------- Forwarded Message ---------- Subject: Re: [Shorewall-users] strange UDP scan results on a Shorewall=20 firewall Date: Sun, 3 Mar 2002 08:33:20 -0800 From: Tom Eastep <teastep@shorewall.net> To: "Scott Duncan" <sduncan@cytechconsult.com> On Saturday 02 March 2002 04:30 am, Scott Duncan wrote: > Yes, the net->all policy is the same on all three (REJECT log

Thanks to Fabien Demassieux, French Language versions of the QuickStart Guides and the Setup Guide are now available: http://shorewall.net/shorewall_quickstart_guide.htm http://shorewall.sf.net/shorewall_quickstart_guide.htm These guides will be available shortly on the other Shorwall Mirrors -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \

I just installed Shorewall for the first time and had no working knowledge of iptables other than a couple magazine articles prior to this time. The use of the QSG is fresh in my mind. It was the single most helpful guide of any on the site. Comments: 1) The /etc/shorewall/masq section shows the use of the third column but then says you don''t need it if you have a dynamic ip. Its

http://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 ftp://shorewall.net/pub/shorewall/2.2-Beta/shorewall-2.2.0-Beta2 Problems Corrected: 1. The "shorewall check" command results in the (harmless) error message: /usr/share/shorewall/firewall: line 2753: check_dupliate_zones: command not found 2. The

Thanks for such a quick reply Tom! Any suggestions then as to what I might do other than putting a second nic in the SBS and opening it up for web access? I don''t like the idea, but since MS SBS includes fireall that is actually what MS suggests. Boyd -----Original Message----- From: Tom Eastep [mailto:teastep@shorewall.net] Sent: January 3, 2005 3:05 PM To: Shorewall Users Cc: Boyd