Shorewall is an open source firewall tool for Linux that builds upon the Netfilter ( iptables/ ipchains) system built into the Linux kernel, making it easier to manage more complex configuration schemes by providing a higher level of abstraction for describing rules using text files.