---
name: "shorewall-modules"
section: "5"
platform: "linux"
package: "shorewall"
version: "5.2.8-6"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/shorewall-modules"
---

# shorewall-modules(5)

Shorewall file

## NAME

modules - Shorewall file

## SYNOPSIS

**/usr/share/shorewall\[6\]/modules**

**/usr/share/shorewall\[6\]/helpers**

## DESCRIPTION

These files specify which kernel modules Shorewall will load before trying to determine your iptables/kernel's capabilities.

The modules file is used when LOAD\_HELPERS\_ONLY=No in **shorewall.conf**\[1\](8); the helpers file is used when LOAD\_HELPERS\_ONLY=Yes

**Important**\

Beginning with Shorewall 5.2.3, the LOAD\_HELPERS\_ONLY option has been removed and the behavior is the same as if LOAD\_HELPERS\_ONLY=Yes was specified.

Each record in the files has the following format:

**loadmodule** *modulename* \[*moduleoption*...\]

The *modulename* names a kernel module (without suffix). Shorewall will search for modules based on your MODULESDIR setting in **shorewall.conf**\[1\](8). The *moduleoption*s are passed to modprobe (if installed) or to insmod.

The /usr/share/shorewall/modules file contains a large number of modules. Users are encouraged to copy the file to /etc/shorewall/modules and modify the copy to load only the modules required or to use LOAD\_HELPERS\_ONLY=Yes..if n {.sp

**Note**\

If you build monolithic kernels and have not installed module-init-tools, then create an empty /etc/shorewall/modules file; that will prevent Shorewall from trying to load modules at all.

## EXAMPLE

loadmodule ip\_conntrack\_ftp ports=21,221

## FILES

/usr/share/shorewall/modules

/usr/share/shorewall/helpers

/etc/shorewall/modules

/etc/shorewall/helpers

/usr/share/shorewall6/modules

/usr/share/shorewall6/helpers

/etc/shorewall6/modules

/etc/shorewall6/helpers

## SEE ALSO

[shorewall(8)](/shorewall/8.md)

## NOTES

- 1\.

  shorewall.conf

  https://shorewall.org/manpages/shorewall.conf.html