| Newsgroups |
gmane.comp.security.shorewall |
| Message-ID |
<[email protected]> |
--===============6988122030774761747==
Content-Type: multipart/alternative; boundary=Apple-Mail-89720F38-78BB-4B66-B588-7647DDAE8D1F
Content-Transfer-Encoding: 7bit
--Apple-Mail-89720F38-78BB-4B66-B588-7647DDAE8D1F
Content-Type: text/html;
charset=utf-8
Content-Transfer-Encoding: quoted-printable
<html class=3D"apple-mail-supports-explicit-dark-mode"><head><meta http-equi=
v=3D"content-type" content=3D"text/html; charset=3Dutf-8"></head><body dir=3D=
"auto"><div dir=3D"ltr"></div><div dir=3D"ltr">Well done David,</div><div di=
r=3D"ltr"><br></div><div dir=3D"ltr">What a fantastic initiative to preserve=
the outstanding firewall abstraction provided by Shorewall, together with t=
he years of development effort to support that abstraction.</div><div dir=3D=
"ltr"><br></div><div dir=3D"ltr">Moving to Python is a great way forward.</d=
iv><div dir=3D"ltr"><br></div><div dir=3D"ltr">I=E2=80=99ve been dreading mi=
grating from Shorewall. You=E2=80=99ve given me hope.</div><div dir=3D=
"ltr"><br></div><div dir=3D"ltr">Cheers,</div><div dir=3D"ltr"><br></div><di=
v dir=3D"ltr">Bruce</div><div dir=3D"ltr"><br></div><div dir=3D"ltr"><br><bl=
ockquote type=3D"cite">On 19 Jul 2026, at 14:56, Dave Kempe <davidkempe@g=
mail.com> wrote:<br><br></blockquote></div><blockquote type=3D"cite"><div=
dir=3D"ltr">=EF=BB=BF<div dir=3D"ltr"><div>Hi Shorewall people!</div><div><=
br></div><div>We (<a href=3D"http://sol1.com.au">sol1.com.au</a>) have been a=
vid Shorewall users and supporters for around 20 years. Wow that is a long t=
ime. We have a fleet of managed firewalls that use Shorewall, among other th=
ings, to keep many of our customers online and secure. The decline of Shorew=
all has been "a problem for another day" for a long time now, and I finally d=
ecided to do something about it.</div><div><br></div><div>Shorewall-nft is a=
Python ground up rewrite, specifically to support keeping your shorewall co=
nfig the same, but it emits pure nftables.</div><div><br><a href=3D"https://=
github.com/sol1/shorewall-nft">https://github.com/sol1/shorewall-nft</a></di=
v><div><br></div><div>We are running it on many of our systems already, =
;in fact, these packets are flowing to you over it right now. It was tested a=
nd developed against a primary fleet of 45 different firewall configs, inclu=
ding all the standard configurations and much of the weirder configurat=
ions represented.</div><div><br></div><div>Our aim is to replace Shorewall w=
ith shorewall-nft, and continue supporting it. Our team has managed custom s=
oftware and linux firewalls for years, and would be honoured to become custo=
dians of this project. Of course we welcome all input, and this is a true Op=
en Source project.</div><div><br></div><div>We would love some feedback on w=
hether it works for you. You can simply grab the deb or rpm, do a shor=
ewall check and shorewall migrate, and it will flush your old rules and swit=
ch you to nftables.</div><div><br></div><div>As bonus features, we also buil=
t shorewall-lsm, a Link Status Monitor with multi-ISP support that appears t=
o be working well and geoip improvements along they way. Any improvements ma=
intain backwards config capability, and simply add to the existing config ba=
se.<br></div><div>See <a href=3D"https://github.com/sol1/shorewall-nft/=
blob/main/docs/failover.md">https://github.com/sol1/shorewall-nft/blob/main/=
docs/failover.md</a> for more info on shorewall-lsm</div><div><br></div><div=
>Happy to provide support or see FRs via github infrastructure. If the proje=
ct gets legs at all, we will consider a docs site or other further improveme=
nts.</div><div><br></div><div>Thanks</div><div>Dave Kempe</div><div><br></di=
v><div><br></div></div>
<span>_______________________________________________</span><br><span>Shorew=
all-users mailing list</span><br><span>[email protected]=
</span><br><span>https://lists.sourceforge.net/lists/listinfo/shorewall-user=
s</span><br></div></blockquote></body></html>=
--Apple-Mail-89720F38-78BB-4B66-B588-7647DDAE8D1F--
--===============6988122030774761747==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--===============6988122030774761747==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline