Shorewall

Spec sheet

Purpose

Shorewall is a high-level tool for configuring Netfilter firewalls on GNU/Linux systems.Read 2 Oct 2026 · shorewall.org

Supported platforms

linux,windows,macosRead 22 Sep 2026 · shorewall.org

Deployment

It can be used on a dedicated firewall, a multifunction gateway, router or server, or a standalone GNU/Linux system.Read 2 Oct 2026 · shorewall.org

Free plan

YesRead 22 Sep 2026 · shorewall.org

Integrations

The feature page says a GUI is available through Webmin 1.060 and later.Read 2 Oct 2026 · shorewall.org

Support

The support guide directs users to documentation and mailing lists, requires subscription before posting, and also lists an IRC channel for quick questions.Read 2 Oct 2026 · shorewall.org

Application rules

NoRead 22 Sep 2026 · shorewall.org

Central management

YesRead 22 Sep 2026 · shorewall.org

Centralized administration

Shorewall can generate firewall scripts on an administrative system for Shorewall-lite installations on the firewalls it controls.Read 2 Oct 2026 · shorewall.org

Connection alerts

YesRead 22 Sep 2026 · shorewall.org

Firewall functions

Documented address and routing features include SNAT, port forwarding, one-to-one NAT, Proxy ARP, NETMAP and multiple internet links.Read 2 Oct 2026 · shorewall.org

How it works

It reads configuration files describing firewall and gateway requirements, then configures Netfilter and Linux networking using system utilities.Read 2 Oct 2026 · shorewall.org

IPv6

The feature list includes IPv6 support, provided through the Shorewall6 package described on the download page.Read 2 Oct 2026 · shorewall.org

License and warranty

The site identifies Shorewall as GPL-licensed and says it is provided without warranty, including implied merchantability or fitness for a particular purpose.Read 2 Oct 2026 · shorewall.org

Not a daemon

After configuring Linux networking, Shorewall exits; it does not leave a Shorewall process running.Read 2 Oct 2026 · shorewall.org

Outbound control

advancedRead 22 Sep 2026 · shorewall.org

Policy configuration

Configuration files allow customizable rules between network zones, with support for multiple interfaces per zone and multiple zones per interface.Read 2 Oct 2026 · shorewall.org

Rule direction

bothRead 22 Sep 2026 · shorewall.org

Security and file integrity

The download page says packages are GPG-signed and checksummed and instructs users to verify them with the public key.Read 2 Oct 2026 · shorewall.org

Virtualization

The feature page lists KVM, Xen, Linux-Vserver, OpenVZ, VirtualBox, LXC and Docker support.Read 2 Oct 2026 · shorewall.org

VPN and traffic

The feature list includes IPsec, GRE, IPIP and OpenVPN tunnels, PPTP clients and servers, and traffic control and shaping.Read 2 Oct 2026 · shorewall.org

Who it is for

The introduction says Shorewall is flexible and powerful but not the easiest option, and recommends simpler alternatives for users seeking a point-and-click firewall with minimal networking knowledge.Read 2 Oct 2026 · shorewall.org

Plans and prices

Every Shorewall plan and price →

Where Specifiction places it

• Firewall Software#20 of 768.3