mirror of
https://gitlab.com/shorewall/code.git
synced 2025-01-22 21:48:39 +01:00
Update the Shared Config document
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
9b02f7a922
commit
84cd80eba9
@ -2,7 +2,7 @@
|
|||||||
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
|
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
|
||||||
"http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd">
|
"http://www.oasis-open.org/docbook/xml/4.4/docbookx.dtd">
|
||||||
<article>
|
<article>
|
||||||
<!--$Id$-->
|
<!--mangle$Id$-->
|
||||||
|
|
||||||
<articleinfo>
|
<articleinfo>
|
||||||
<title>Shared Shorewall and Shorewall6 Configuration</title>
|
<title>Shared Shorewall and Shorewall6 Configuration</title>
|
||||||
@ -620,9 +620,9 @@ apps { INTERFACE=IRC_IF, OPTIONS=$IRC_OPTIONS }
|
|||||||
<para>/etc/shorewall/hosts is used to define the vpn zone:</para>
|
<para>/etc/shorewall/hosts is used to define the vpn zone:</para>
|
||||||
|
|
||||||
<programlisting>#ZONE HOSTS OPTIONS
|
<programlisting>#ZONE HOSTS OPTIONS
|
||||||
vpn1 { HOSTS=PROD_IF:$ALL }
|
vpn { HOSTS=PROD_IF:$ALL }
|
||||||
vpn1 { HOSTS=FAST_IF:$ALL }
|
vpn { HOSTS=FAST_IF:$ALL }
|
||||||
vpn1 { HOSTS=LOC_IF:$ALL }
|
vpn { HOSTS=LOC_IF:$ALL }
|
||||||
</programlisting>
|
</programlisting>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
@ -1003,8 +1003,8 @@ Mirrors(ACCEPT:none) { SOURCE=net, DEST=dmz:$SERVER, PROTO=tcp, DPORT=873 }
|
|||||||
<para>Both address families define IPSEC tunnels:</para>
|
<para>Both address families define IPSEC tunnels:</para>
|
||||||
|
|
||||||
<programlisting>#TYPE ZONE GATEWAY GATEWAY_ZONE
|
<programlisting>#TYPE ZONE GATEWAY GATEWAY_ZONE
|
||||||
ipsecnat {ZONE=net, GATEWAY=$ALL, GATEWAY_ZONE=vpn1 }
|
ipsecnat {ZONE=net, GATEWAY=$ALL, GATEWAY_ZONE=vpn }
|
||||||
ipsecnat {ZONE=loc, GATEWAY=$ALL, GATEWAY_ZONE=vpn1 }
|
ipsecnat {ZONE=loc, GATEWAY=$ALL, GATEWAY_ZONE=vpn }
|
||||||
</programlisting>
|
</programlisting>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user