extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-01-08 22:58:50 +01:00
Code Issues Packages Projects Releases Wiki Activity

Revise Vserver article

Browse Source
This commit is contained in:
Tom Eastep 2010-10-10 08:28:38 -07:00
parent 7d66dcae52
commit 959b8f5167
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
docs/Vserver.xml
View File

@ -114,7 +114,7 @@ gateway:~#</programlisting>
<section> <section>
<title>Vserver Zones</title> <title>Vserver Zones</title>
<para>Here is a diagram of the network configuration here at Shorewall.net <para>This is a diagram of the network configuration here at Shorewall.net
during the summer of 2010:</para> during the summer of 2010:</para>
<graphic align="center" fileref="images/Network2010a.png" /> <graphic align="center" fileref="images/Network2010a.png" />
@ -131,6 +131,12 @@ net ipv4 #Internet
vpn ipv4 #OpenVPN clients vpn ipv4 #OpenVPN clients
<emphasis role="bold">dmz vserver #Vservers</emphasis></programlisting> <emphasis role="bold">dmz vserver #Vservers</emphasis></programlisting>
<para><filename>/etc/shorewall/interfaces</filename>:</para>
<programlisting>#ZONE INTERFACE BROADCAST OPTIONS
<emphasis role="bold">net eth1 detect dhcp,optional,routefilter=0,logmartians,proxyarp=0,nosmurfs,upnp</emphasis>
...</programlisting>
<para><filename>/etc/shorewall/hosts</filename>:</para> <para><filename>/etc/shorewall/hosts</filename>:</para>
<programlisting>#ZONE HOST(S) OPTIONS <programlisting>#ZONE HOST(S) OPTIONS
@ -160,10 +166,16 @@ vpn ipv6
<emphasis role="bold">dmz vserver</emphasis> <emphasis role="bold">dmz vserver</emphasis>
</programlisting> </programlisting>
<para><filename>/etc/shorewall6/interfaces</filename>:</para>
<programlisting>#ZONE INTERFACE BROADCAST OPTIONS
<emphasis role="bold">net sit1 detect tcpflags,forward=1,nosmurfs,routeback</emphasis>
...</programlisting>
<para><filename>/etc/shorewall6/hosts</filename>:</para> <para><filename>/etc/shorewall6/hosts</filename>:</para>
<programlisting>#ZONE HOST(S) OPTIONS <programlisting>#ZONE HOST(S) OPTIONS
dmz sit1:[2001:470:e857:1::/64]</programlisting> <emphasis role="bold">dmz sit1:[2001:470:e857:1::/64]</emphasis></programlisting>
<para>Note that I choose to place the Vservers on sit1 (the IPv6 net <para>Note that I choose to place the Vservers on sit1 (the IPv6 net
interface) rather than on eth1. Again, it really doesn't matter interface) rather than on eth1. Again, it really doesn't matter