SHOREWALL-ECN(5)

📦
version 5.2.8 · 2 versions
  • 5.2.8 · alpine 3.22, alpine 3.23, alpine 3.24, debian bookworm, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking (latest)
  • 5.2.3.4 · ubuntu jammy
, in alpine 3.22, alpine 3.23, alpine 3.24, debian bookworm, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 SHOREWALL-ECN — the ecn file, bestie 💖

okay so you found the shorewall-ecn manual page (section 5, Configuration Files, iykyk) and honestly? you're in for a lil treat and also a lil warning. let's get into it 🫶

✨ SYNOPSIS ✨

/etc/shorewall/ecn

🌸 DESCRIPTION 🌸

IPv4 only. periodt. don't come in here with your IPv6 business, this file does not know her 💅

so like — this file is where you list the destinations for which you want to disable ECN (that's Explicit Congestion Notification, for the uninitiated). but bestie, listen 😭 use of this file is deprecated in favor of ECN rules in shorewall-mangle[1](8). so like, she still works, but she's giving legacy. the mangle rules are the moment now ✨

the columns in the file are as follows:

  • INTERFACE — interface. this is the interface through which the host(s) communicate with the firewall. like, the doorway they're walking through 🚪
  • HOST(S) (Optional) — [-|address-or-address-range[,address-or-address-range]...]. a comma-separated list of host and/or network addresses. if you leave it empty or just slap a - in there, then 0.0.0.0/0 is assumed (that's everybody, babes 🌍). and if your kernel and iptables include iprange match support, then IP address ranges are also permitted. fancy 💅

🎀 FILES 🎀

  • /etc/shorewall/ecn

👀 SEE ALSO 👀

📝 NOTES 📝

  1. shorewall-mangle https://shorewall.org/manpages/shorewall-mangle.html
lowkey reminder bestie: deprecated ≠ deleted, but new configs should be using ECN rules in shorewall-mangle(8), no cap 🧚

and that's the whole page, gorgeous 💜 this was from the Configuration Files chapter, version date 09/24/2020, and the page title is SHOREWALL-ECN(5) — now go forth and configure responsibly ✨💖🦋

📦 where this page comes from