SHOREWALL-ROUTES(5)

πŸ“¦
version 5.2.8 Β· 2 versions
  • 5.2.8 Β· alpine 3.22, alpine 3.23, alpine 3.24, debian bookworm, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking (latest)
  • 5.2.3.4 Β· ubuntu jammy
, in alpine 3.22, alpine 3.23, alpine 3.24, debian bookworm, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

✨ SHOREWALL-ROUTES ✨ (that's section 5 of the manual, bestie β€” a config file page πŸ’–)

🌸 NAME 🌸

routes β€” a Shorewall file, and honestly? it's the one that tells your packets where to go πŸ—ΊοΈβœ¨


πŸŽ€ SYNOPSIS πŸŽ€

/etc/shorewall[6]/routes

πŸ¦‹ DESCRIPTION πŸ¦‹

Okay so this file is kinda new-ish β€” it showed up in Shorewall 4.4.15 β€” and what it does is define routes that get added to provider routing tables. That's it, that's the job. πŸ’…

The columns in the file go like this, in order, no skipping:

πŸ‘‘ PROVIDER

The name or the number of a provider that you defined over in shorewall-providers(5). And starting with Shorewall 4.5.14, you can also just put main in this column to add routes to the main routing table. main character routing table energy, honestly. 🌈

πŸ“ DEST

The destination host address or network address. Where the packets are headed, periodt. 🎯

πŸšͺ GATEWAY (Optional)

If you fill this in, it gives the IP address of the gateway to the DEST.

And now for the glow-up timeline:

  • Starting with Shorewall 4.5.14, you may put blackhole in this column to create a blackhole route. πŸ•³οΈ
  • Starting with Shorewall 4.5.15, you may put prohibit or unreachable in this column to create a prohibit route or an unreachable route respectively.

πŸ”Œ DEVICE (Optional)

Specifies the device route. If neither DEVICE nor GATEWAY is given, then the INTERFACE specified for the PROVIDER in shorewall-providers(5).

🚨 Careful bestie β€” this column must be omitted if you put blackhole, prohibit or unreachable in the GATEWAY column. Don't do both, it's not the vibe.

βš™οΈ OPTIONS (Optional)

Added in Shorewall 5.0.2. The allowed options are:

  • persistent β€” if you specify this, the route stays in the provider's routing table even when the provider is disabled. It's giving loyal. 🫢

πŸ“ FILES πŸ“

  • /etc/shorewall/routes
  • /etc/shorewall6/routes

πŸ‘€ SEE ALSO πŸ‘€


πŸ“ NOTES πŸ“

  1. shorewall-providers https://shorewall.org/manpages/shorewall-providers.html
  2. https://shorewall.org/configuration_file_basics.htm#Pairs https://shorewall.org/configuration_file_basics.htm#Pairs

And that's the whole page, no cap. This was the Configuration Files manual, SHOREWALL-ROUTES(5), dated 09/24/2020 β€” go configure your routes and slay, bestie πŸ’œβœ¨πŸŽ€