modules − shorewall6 file
/usr/share/shorewall6/modules |
||
/usr/share/shorewall6/helpers |
These files specify which kernel modules shorewall6 will load before trying to determine your ip6tables/kernel's capabilities. The modules file is used when LOAD_HELPERS_ONLY=No in shorewall6.conf [1] (5); the helpers file is used when LOAD_HELPERS_ONLY=Yes.
Each record in the files has the following format:
loadmodule modulename [moduleoption...] |
The modulename names a kernel module (without suffix). shorewall6 will search for modules based on your MODULESDIR and MODULE_SUFFIX settings in shorewall6.conf [1] (5). The moduleoptions are passed to modprobe (if installed) or to insmod.
The /usr/share/shorewall6/modules file contains a large number of modules. Users are encouraged to copy the file to /etc/shorewall6/modules and modify the copy to load only the modules required or use LOAD_HELPERS_ONLY=Yes..if n .sp
Note
If you build monolithic kernels and have not installed module−init−tools, then create an empty /etc/shorewall6/modules file; that will prevent shorewall6 from trying to load modules at all.
loadmodule ip_conntrack_ftp ports=21,221
/usr/share/shorewall6/modules
/usr/share/shorewall6/helpers
/etc/shorewall6/modules
/etc/shorewall6/helpers
shorewall6(8), shorewall6−accounting(5), shorewall6−actions(5), shorewall6−blacklist(5), shorewall6−hosts(5), shorewall6−interfaces(5), shorewall6−maclist(5), shorewall6−netmap(5),shorewall6−params(5), shorewall6−policy(5), shorewall6−providers(5), shorewall6−rtrules(5), shorewall6−routestopped(5), shorewall6−rules(5), shorewall6.conf(5), shorewall6−secmarks(5), shorewall6−tcclasses(5), shorewall6−tcdevices(5), shorewall6−mangle(5), shorewall6−tos(5), shorewall6−tunnels(5), shorewall6−zones(5)
1. |
shorewall6.conf |
http://www.shorewall.net/manpages6/shorewall6.conf.html