SHOREWALL-MACLIST(5)

✨ NAME ✨

maclist — the Shorewall MAC Verification file, bestie 💖 (this is the shorewall-maclist(5) page, iykyk)

🌸 SYNOPSIS 🌸

/etc/shorewall[6]/maclist

🦋 DESCRIPTION 🦋

Okay so listen. This file is where you define the MAC addresses — and optionally their little IP address besties — that are allowed to use a specified interface. Gatekeeping, but make it ✨networking✨.

The way you turn this whole thing on is by using the maclist option over in the shorewall-interfaces[1](5) or shorewall-hosts[2](5) configuration file. No option, no vibe check. 🫶

The columns in the file go like this (and heads up: where a column name is followed by a different name in parentheses, that different name is the one you use in the alternate specification syntax — yes it's giving two names, one column, iconic behavior 💅).

• DISPOSITION — {ACCEPT|DROP|REJECT}[:log-level] So this is ACCEPT or DROP (and btw, if MACLIST_TABLE=filter in shorewall.conf[3](5), then REJECT is also allowed 👑). If you specify the log-level, then packets matching the rule get logged at that level. Logging, but make it intentional. 🔥
• INTERFACE — interface The network interface to a host. That's it, that's the whole thing. 🌈
• MAC — address The MAC address of the host — and no cap, you do not need to use the Shorewall format for MAC addresses here. Freedom. 🦋 If IP ADDRESSES is supplied, then MAC can be supplied as a dash (-).
• IP ADDRESSES (addresses) — [address[,address]...] Optional! But if you do specify it, then both the MAC and the IP address have to match. Periodt. 💅 This column can hold a comma-separated list of host and/or subnet addresses. And if your kernel and iptables have iprange match support, then IP address ranges are also allowed ✨. Similarly, if your kernel and iptables include ipset support, then set names (prefixed by +) are also allowed. Fancy. 🎀

🎀 FILES 🎀

• /etc/shorewall/maclist
• /etc/shorewall6/maclist

💜 SEE ALSO 💜

• https://shorewall.org/MAC_Validation.html[4]
• https://shorewall.org/configuration_file_basics.htm#Pairs[5]
• shorewall(8)

⭐ NOTES ⭐

1. shorewall-interfaces https://shorewall.org/manpages/shorewall-interfaces.html
2. shorewall-hosts https://shorewall.org/manpages/shorewall-hosts.html
3. shorewall.conf https://shorewall.org/manpages/shorewall.conf.html
4. https://shorewall.org/MAC_Validation.html https://shorewall.org/MAC_Validation.html
5. https://shorewall.org/configuration_file_basics.htm#Pairs https://shorewall.org/configuration_file_basics.htm#Pairs

Configuration Files · 09/24/2020 · SHOREWALL-MACLIST(5)

And that's the whole page bestie, you ate that 🍓✨ go forth and verify those MACs, mwah 💖🧚‍♀️