Greetings,

I'd like to add a rule to shorewall "rules" file that allows 4011 for PXE boot.

I've got part of this done for allowing PXE boot:
TFTP/ACCEPT pvt $FW

The above service is viewable and working...


so I'd like the same for PXE...
so, is there a rule like this?

PXE/ACCEPT pvt $FW


Is PXE a keyword that I can use?

I guess what this problem gets down to is, where is the keyword list for the shorewall RULES file? I found "THE" link for the rules file on their website, however, the document never seems to get into the classes of service that I can choose from to allow/deny/forward, etc.

All rules to date in this server's "rules" file are indicated by service... TFTP, HTTP, etc. - so I've got no example to try just a plain port number.

If there is no PXE service keyword, how do I change the syntax to accept port 4011?

Would it be:
4011/ACCEPT pvt $FW

?

Any help kindly appreciated.
PS All changes and restarts to shorewall interrupt service are momentarily disruptive, so I'd like to get this down with as few retries as possible. I felt I needed to explain why I just didn't try the "PXE/ACCEPT" rule outright before asking for help.

Ok I got it.
I added this to the "rules" file.
I then ran "shorewall check" and made sure it was good.
Then, I just restarted shorewall.

Accept pvt $FW tcp 4011

That's all it took.