Name
params — Shorewall parameters file
Synopsis
/etc/shorewall/params
Description
Assign any shell variables that you need in this file. The file is always processed by /bin/sh
or by the shell specified
through SHOREWALL_SHELL in shorewall.conf (5) so the full
range of shell capabilities may be used.
It is suggested that variable names begin with an upper case letter to distinguish them from variables used internally within the Shorewall programs
The following variable names must be avoided. Those in bold font must be avoided in all Shorewall versions; those in regular font must be avoided in versions prior to 4.4.8.
Any option from shorewall.conf (5) |
COMMAND |
CONFDIR |
DEBUG |
ECHO_E |
ECHO_N |
EXPORT |
FAST |
FILEMODE |
HOSTNAME |
IPT_OPTIONS |
NOROUTES |
PREVIEW |
PRODUCT |
PROFILE |
PURGE |
RECOVERING |
RESTOREPATH |
RING_BELL |
SHAREDIR |
Any name beginning with SHOREWALL_ or SW_ |
STOPPING |
TEST |
TIMESTAMP |
USE_VERBOSITY |
VARDIR |
VERBOSE |
VERBOSE_OFFSET |
VERSION |
Example params file:
NET_IF=eth0 NET_BCAST=130.252.100.255 NET_OPTIONS=routefilter,norfc1918
Example shorewall-interfaces(5) file.
ZONE INTERFACE BROADCAST OPTIONS net $NET_IF $NET_BCAST $NET_OPTIONS
This is the same as if the interfaces file had contained:
ZONE INTERFACE BROADCAST OPTIONS net eth0 130.252.100.255 routefilter,norfc1918
See ALSO
http://www.shorewall.net/configuration_file_basics.htm#Variables
shorewall(8), shorewall-accounting(5), shorewall-actions(5), shorewall-blacklist(5), shorewall-hosts(5), shorewall_interfaces(5), shorewall-ipsets(5), shorewall-maclist(5), shorewall-masq(5), shorewall-nat(5), shorewall-netmap(5), shorewall-policy(5), shorewall-providers(5), shorewall-proxyarp(5), shorewall-rtrules(5), shorewall-routestopped(5), shorewall-rules(5), shorewall.conf(5), shorewall-secmarks(5), shorewall-tcclasses(5), shorewall-tcdevices(5), shorewall-mangle(5), shorewall-tos(5), shorewall-tunnels(5), shorewall-zones(5)