Shorewall is just a front end to IPtables. It would be easy enough to
just issue the iptables command to add that in temporarily.

iptables -I net2fw -p tcp --dport 80 -j ACCEPT

(or fw2net depending on the direction desired) Use

iptables -nL --line-numbers

to find your rule, Then use

iptables -D net2fw #

To delete the rule (replacing # with your rule. Probably 1, though.)

Jeff Delinck

All opinions are my own and do not reflect company policy.

On 3/5/2015 9:39 AM, Erich Titl wrote:
> Hi Folks
>
> I need to temporarily allow HTTP connections from my shorewall based
> LEAF box, preferrably without having to touch the shorewall files and be
> able to stop this functionality again.
>
> I looked a bit at the very extensive shorewall docs, but nothing
> immediately caught my eyes. It would be nice to somehow do it like the
> port knocking mechanism.
>
> Any thoughts
>
> Thanks
>
> ET
>
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming The Go Parallel Website, sponsored
> by Intel and developed in partnership with Slashdot Media, is your hub for all
> things parallel software development, from weekly thought leadership blogs to
> news, videos, case studies, tutorials and more. Take a look and join the 
> conversation now. http://goparallel.sourceforge.net/
>
>
> ------------------------------------------------------------------------
> leaf-user mailing list: leaf-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/

------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the 
conversation now. http://goparallel.sourceforge.net/
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Reply via email to