mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-29 09:38:51 +01:00
72 lines
2.4 KiB
Plaintext
72 lines
2.4 KiB
Plaintext
|
#
|
||
|
|
# Shorewall version 2.4 - Routing Rules
|
||
|
|
#
|
||
|
|
# /etc/shorewall/routes
|
||
|
|
#
|
||
|
|
# Entries in this file cause packets to be routed in non-standard
|
||
|
|
# ways.
|
||
|
|
#
|
||
|
|
# I M P O R T A N T ! ! ! !
|
||
|
|
#
|
||
|
|
# In order to use entries in this file, your kernel and iptables must
|
||
|
|
# have ROUTE target support.
|
||
|
|
#
|
||
|
|
# Columns are:
|
||
|
|
#
|
||
|
|
#
|
||
|
|
# SOURCE Source of the packet. May be any of the following:
|
||
|
|
#
|
||
|
|
# - A host or network address
|
||
|
|
# - A network interface name.
|
||
|
|
# - The name of an ipset prefaced with "+"
|
||
|
|
# - $FW (for packets originating on the firewall)
|
||
|
|
# - A MAC address in Shorewall format
|
||
|
|
# - A range of IP addresses (assuming that your
|
||
|
|
# kernel and iptables support range match)
|
||
|
|
# - A network interface name followed by ":"
|
||
|
|
# and an address or address range.
|
||
|
|
#
|
||
|
|
# DEST Destination of the packet. May be any of the
|
||
|
|
# following:
|
||
|
|
#
|
||
|
|
# - A host or network address
|
||
|
|
# - A network interface name (determined from
|
||
|
|
# routing table(s))
|
||
|
|
# - The name of an ipset prefaced with "+"
|
||
|
|
# - A network interface name followed by ":"
|
||
|
|
# and an address or address range.
|
||
|
|
#
|
||
|
|
# PROTO Protocol - Must be "tcp", "udp", "icmp", "ipp2p",
|
||
|
|
# a number, or "all". "ipp2p" requires ipp2p match
|
||
|
|
# support in your kernel and iptables.
|
||
|
|
#
|
||
|
|
# PORT(S) Destination Ports. A comma-separated list of Port
|
||
|
|
# names (from /etc/services), port numbers or port
|
||
|
|
# ranges; if the protocol is "icmp", this column is
|
||
|
|
# interpreted as the destination icmp-type(s).
|
||
|
|
#
|
||
|
|
# If the protocol is ipp2p, this column is interpreted
|
||
|
|
# as an ipp2p option without the leading "--" (example "bit"
|
||
|
|
# for bit-torrent). If no PORT is given, "ipp2p" is
|
||
|
|
# assumed.
|
||
|
|
#
|
||
|
|
# This column is ignored if PROTOCOL = all but must be
|
||
|
|
# entered if any of the following field is supplied.
|
||
|
|
# In that case, it is suggested that this field contain
|
||
|
|
# "-"
|
||
|
|
#
|
||
|
|
# SOURCE PORT(S) (Optional) Source port(s). If omitted,
|
||
|
|
# any source port is acceptable. Specified as a comma-
|
||
|
|
# separated list of port names, port numbers or port
|
||
|
|
# ranges.
|
||
|
|
#
|
||
|
|
# INTERFACE The interface that the packet is to be routed out of.
|
||
|
|
#
|
||
|
|
# GATEWAY The gateway that the packet is to be forewarded through.
|
||
|
|
#
|
||
|
|
# See http://shorewall.net/Shorewall_and_Routing.html for additional information.
|
||
|
|
#######################################################################################
|
||
|
|
#SOURCE DEST PROTO PORT(S) SOURCE INTERFACE GATEWAY
|
||
|
|
# PORT(S)
|
||
|
|
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
|