Clarify FAQ 1e

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3616 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-03-02 16:19:28 +00:00
parent baa3151bcb
commit 4d4a06f2c1

View File

@ -17,7 +17,7 @@
</author> </author>
</authorgroup> </authorgroup>
<pubdate>2006-01-30</pubdate> <pubdate>2006-03-02</pubdate>
<copyright> <copyright>
<year>2001-2006</year> <year>2001-2006</year>
@ -307,8 +307,9 @@ DNAT loc dmz:192.168.2.4 tcp 80 - $ETH0
<para><emphasis role="bold">Answer </emphasis>courtesy of Ryan: Assume <para><emphasis role="bold">Answer </emphasis>courtesy of Ryan: Assume
that the IP address of your local firewall interface is 192.168.1.1. that the IP address of your local firewall interface is 192.168.1.1.
If you add the following rule then from the net, you will have 4104 If you configure SSHD to only listen on that interface and add the
listening, from your LAN, port 22.</para> following rule then from the net, you will have 4104 listening, from
your LAN, port 22.</para>
<programlisting>#ACTION SOURCE DEST PROTO DEST PORT(S) <programlisting>#ACTION SOURCE DEST PROTO DEST PORT(S)
DNAT net fw:192.168.1.1:22 tcp 4104</programlisting> DNAT net fw:192.168.1.1:22 tcp 4104</programlisting>