SHOREWALL6-LITE.C(5)

💖 SHOREWALL6-LITE.C(5) — the shorewall6-lite.conf glow-up 💖

okay bestie, so this is the manual page for shorewall6-lite.conf, from the Configuration Files section of the manual. yes it's giving "boring system file" but lowkey it's the main character of your whole IPv6 firewall setup, so let's get into it 🫶

---

✨ NAME ✨

shorewall6-lite.conf — the Shorewall6 Lite global configuration file. it's the one file that sets the vibe for everything 🌸

---

✨ SYNOPSIS ✨

/etc/shorewall6-lite/shorewall6-lite.conf

that's it. that's the path. she lives there 💅

---

✨ DESCRIPTION ✨

This file sets options that apply to Shorewall6 Lite as a whole. like, the whole entire thing. global queen energy 👑

The file consists of Shell comments (lines beginning with #), blank lines and assignment statements (variable=value). Each variable's setting is preceded by comments that describe the variable and it's effect. so like, the comments are literally right there telling you what's up — read them, bestie, they're free ✨

Any option not specified in this file gets its value from the shorewall6.conf file used during compilation of /var/lib/shorewall6-lite/firewall. Those settings may be found in the file /var/lib/shorewall6-lite/firewall.conf. so if you're like "wait why is this doing that" — that's where the default came from, no cap 🔍

---

✨ OPTIONS ✨

The following options may be set in shorewall6.conf.

• IP6TABLES=[pathname] — This parameter names the ip6tables executable to be used by Shorewall6. If not specified or if specified as a null value, then the ip6tables executable located using the PATH option is used. so like, tell her which ip6tables to use, or she'll go find one herself 🧚
• LOGFILE=[pathname] — This parameter tells the /sbin/shorewall6 program where to look for Shorewall6 messages when processing the dump, logwatch, show log, and hits commands. If not assigned or if assigned an empty value, /var/log/messages is assumed. default is that classic /var/log/messages, periodt 📜
• LOGFORMAT=["formattemplate"] — The value of this variable generate the --log-prefix setting for Shorewall6 logging rules. It contains a “printf” formatting template which accepts three arguments (the chain name, logging rule number (optional) and the disposition). To use LOGFORMAT with fireparse, set it as:

LOGFORMAT="fp=%s:%d a=%s "

If the LOGFORMAT value contains the substring “%d” then the logging rule number is calculated and formatted in that position; if that substring is not included then the rule number is not included. If not supplied or supplied as empty (LOGFORMAT="") then “Shorewall6:%s:%s:” is assumed. so %d is the glow-up switch for "do we show the rule number or not" 🔥

• PATH=pathname[:pathname]... — Determines the order in which Shorewall6 searches directories for executable files. it's the search order, she's picky about it 🎀
• RESTOREFILE=[filename] — Specifies the simple name of a file in /var/lib/shorewall6 to be used as the default restore script in the shorewall6 save, shorewall6 restore, shorewall6 forget and shorewall6 -f start commands. simple name only, bestie — she knows where to look 💜
• SHOREWALL_SHELL=[pathname] — This option is used to specify the shell program to be used to interpret the compiled script. If not specified or specified as a null value, /bin/sh is assumed. Using a light-weight shell such as ash or dash can significantly improve performance. this is the "swap your shell, get free speed" hack and we are obsessed 🏃♀️💨
• SUBSYSLOCK=[pathname] — This parameter should be set to the name of a file that the firewall should create if it starts successfully and remove when it stops. Creating and removing this file allows Shorewall6 to work with your distribution's initscripts. For RedHat, this should be set to /var/lock/subsys/shorewall6. For Debian, the value is /var/state/shorewall6 and in LEAF it is /var/run/shorewall. this is the "hey initscripts, she's alive" flag 🚩
• VERBOSITY=[number] — Shorewall6 has traditionally been very noisy (produced lots of output). You may set the default level of verbosity using the VERBOSITY OPTION. like, she used to talk A LOT. you can turn that down 😭

Values are:

• 0 — Silent. You may make it more verbose using the -v option
• 1 — Major progress messages displayed
• 2 — All progress messages displayed (old default behavior)

If not specified, then 2 is assumed. so yeah, by default she's yapping, fr fr 🗣️

---

✨ FILES ✨

• /etc/shorewall6-lite/shorewall6.conf

---

✨ SEE ALSO ✨

• https://shorewall.org/Documentation_Index.html
• shorewall6-lite(8), shorewall6-accounting(5), shorewall6-actions(5), shorewall6-blacklist(5), shorewall6-hosts(5), shorewall6-interfaces(5), shorewall6-ipsec(5), shorewall6-maclist(5), shorewall6-masq(5), shorewall6-nat(5), shorewall6-netmap(5), shorewall6-params(5), shorewall6-policy(5), shorewall6-providers(5), shorewall6-proxyarp(5), shorewall6-route_rules(5), shorewall6-routestopped(5), shorewall6-rules(5), shorewall6-tcclasses(5), shorewall6-tcdevices(5), shorewall6-tcrules(5), shorewall6-tos(5), shorewall6-tunnels(5), shorewall6-zones(5)

that's the whole reading list, bestie — go collect them all like they're limited edition 🌈⭐

---

and that's the page!! this one lives in the Configuration Files manual section, from version 09/24/2020, filed under the name SHOREWALL6-LITE.C(5). love her, read her, configure responsibly 💖💅🌸