extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-01-03 12:09:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

More fussing around with Xen My Way

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3708 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-03-21 02:02:44 +00:00
parent 7b5f002976
commit 1db060726f
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
docs/XenMyWay.xml
View File

@ -279,7 +279,7 @@ done</programlisting>
</section>
<section id="Dom0">
<title>Dom0 Configuration</title>
<title>Dom0 Shorewall Configuration</title>
<para>The goals for the Shorewall configuration in Dom0 are as
follows:</para>
@ -349,7 +349,7 @@ SECTION NEW
</section>
<section id="Firewall">
<title>Firewall DomU Configuration</title>
<title>Firewall DomU Shorewall Configuration</title>
<para>In the firewall DomU, I run a conventional three-interface
firewall with Proxy ARP DMZ -- it is very similar to the firewall
@ -970,9 +970,10 @@ SECTION NEW
<blockquote>
<para><filename>/etc/openvpn/server-bridge</filename> (Note that I
prefer to push two /1 routes rather than to use the <emphasis
role="bold">redirect-gateway</emphasis> directive; I find that the
latter occasionally leaves the remote system with <emphasis
role="bold">no</emphasis> default gateway):</para>
role="bold">redirect-gateway</emphasis> directive on the client
systems; I find that the latter occasionally leaves the remote system
with <emphasis role="bold">no</emphasis> default gateway while my
approach always works):</para>
<programlisting>dev tap0
@ -1011,7 +1012,7 @@ verb 3
push "route 0.0.0.0 128.0.0.0 192.168.1.254"
push "route 128.0.0.0 128.0.0.0 192.168.1.254"</programlisting>
<para><filename>/etc/bridge-clients/tipper.shorewall.net</filename>
<para><filename>/etc/openvpn/bridge-clients/tipper.shorewall.net</filename>
(used to assign a fixed IP address to clients -- there are other
similar files in this directory):</para>