extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-22 06:10:42 +01:00
Code Issues Packages Projects Releases Wiki Activity

More enhancements to Lenny->Squeeze doc

Browse Source
This commit is contained in:
Tom Eastep 2009-09-07 09:21:47 -07:00
parent 06e85d6191
commit 180024c1fc
1 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
docs/LennyToSqueeze.xml
View File

@ -448,13 +448,15 @@ ipsec2 ipv4</programlisting>
<para>There is a long tradition of specifying an interface name in the <para>There is a long tradition of specifying an interface name in the
SOURCE column of this file. Given that masquerading/SNAT occurs in the SOURCE column of this file. Given that masquerading/SNAT occurs in the
Netfilter POSTROUTING chain where an incoming interface may not be Netfilter POSTROUTING chain where an incoming interface may not be
specified, Shorewall must examine the main routing table to determine specified, Shorewall must examine the main routing table during
those networks routed out of the named interface and add MASQUERADE/SNAT <command>shorewall start</command> and <command>shorewall
rules for traffic from those networks. This requires that the named restart</command> processing to determine those networks routed out of
interface be up and configured when Shorewall starts or restarts.</para> the named interface and add MASQUERADE/SNAT rules for traffic from those
networks. This requires that the named interface be up and configured
when Shorewall starts or restarts.</para>
<para>This continues to be an issue with VPN configurations where the <para>This continues to be a frequent issue with VPN configurations
named interface isn't configured during boot.</para> where the named interface isn't configured during boot.</para>
<para>To emphasize this restriction, if an interface is named in the <para>To emphasize this restriction, if an interface is named in the
SOURCE column of one or more entries, a single warning as follows is SOURCE column of one or more entries, a single warning as follows is
@ -477,7 +479,7 @@ eth0 eth1</programlisting>
<para>Current routing configuration:</para> <para>Current routing configuration:</para>
<programlisting>gateway:~# ip route ls dev eth1 <programlisting>gateway:~# <command>ip route ls dev eth1</command>
172.20.1.0/24 proto kernel scope link src 172.20.1.254 172.20.1.0/24 proto kernel scope link src 172.20.1.254
224.0.0.0/4 scope link 224.0.0.0/4 scope link
gateway:~# gateway:~#