shorewall6-notrack(5)

NAME

notrack - shorewall notrack file

/etc/shorewall/notrack

The notrack file is used to exempt certain traffic from Netfilter
connection tracking. Traffic matching entries in this fill will not be tracked.

The file was added in shorewall-perl 4.2.7 and is not supported by
shorewall-shell or by earlier versions of shorewall-perl.

The columns in the file are as follows.

SOURCE - zone[:interface][:address-list]: where zone is the name of a zone, interface is an interface to that zone, and address-list is a comma-separated list of addresses (may contain exclusion - see shorewall-exclusion[1] (5)).
DEST - [address-list]: where address-list is a comma-separated list of addresses (may contain exclusion - see shorewall-exclusion[1] (5)).
PROTO - protocol-name-or-number: A protocol name from /etc/protocols or a protocol number.
DEST PORT(S) - port-number/service-name-list: A comma-separated list of port numbers and/or service names from
/etc/services. May also include port ranges of the form low-port:high-port if your kernel and iptables include port range support.
SOURCE PORT(S) - port-number/service-name-list: A comma-separated list of port numbers and/or service names from
/etc/services. May also include port ranges of the form low-port:high-port if your kernel and iptables include port range support.
USER/GROUP - [user][:group]: May only be specified if the SOURCE zone is $FW. Specifies the effective user id and or group id of the process sending the
traffic.

/etc/shorewall/notrack