mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-22 06:10:42 +01:00
Eradicate usage of an interface name in the SOURCE column of the masq file
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
ec4fc4ee8f
commit
9f9d9fd8d1
@ -200,12 +200,12 @@ vpn eth0:192.168.1.0/24</programlisting>
|
|||||||
|
|
||||||
<para>/etc/shorewall/masq - System A</para>
|
<para>/etc/shorewall/masq - System A</para>
|
||||||
|
|
||||||
<programlisting>#INTERFACE SUBNET ADDRESS
|
<programlisting>#INTERFACE SOURCE ADDRESS
|
||||||
eth0:!10.0.0.0/8 192.168.1.0/24</programlisting>
|
eth0:!10.0.0.0/8 192.168.1.0/24</programlisting>
|
||||||
|
|
||||||
<para>/etc/shorewall/masq - System B</para>
|
<para>/etc/shorewall/masq - System B</para>
|
||||||
|
|
||||||
<programlisting>#INTERFACE SUBNET ADDRESS
|
<programlisting>#INTERFACE SOURCE ADDRESS
|
||||||
eth0:!192.168.1.0/24 10.0.0.0/8</programlisting>
|
eth0:!192.168.1.0/24 10.0.0.0/8</programlisting>
|
||||||
</blockquote>
|
</blockquote>
|
||||||
|
|
||||||
@ -425,8 +425,8 @@ ipsec net 0.0.0.0/0 vpn1,vpn2,vpn3</programlisting>
|
|||||||
Shorewall will issue warnings to that effect. These warnings may be safely
|
Shorewall will issue warnings to that effect. These warnings may be safely
|
||||||
ignored. FreeS/Wan may now be configured to have three different Road
|
ignored. FreeS/Wan may now be configured to have three different Road
|
||||||
Warrior connections with the choice of connection being based on X-509
|
Warrior connections with the choice of connection being based on X-509
|
||||||
certificates or some other means. Each of these connections will utilize
|
certificates or some other means. Each of these connections will utilize a
|
||||||
a different updown script that adds the remote station to the appropriate
|
different updown script that adds the remote station to the appropriate
|
||||||
zone when the connection comes up and that deletes the remote station when
|
zone when the connection comes up and that deletes the remote station when
|
||||||
the connection comes down. For example, when 134.28.54.2 connects for the
|
the connection comes down. For example, when 134.28.54.2 connects for the
|
||||||
vpn2 zone the <quote>up</quote> part of the script will issue the
|
vpn2 zone the <quote>up</quote> part of the script will issue the
|
||||||
|
@ -624,7 +624,7 @@ $EXT_IF:192.168.99.1 192.168.98.1 192.168.1.98
|
|||||||
|
|
||||||
COMMENT Masquerade Local Network
|
COMMENT Masquerade Local Network
|
||||||
|
|
||||||
$EXT_IF $INT_IF 206.124.146.179
|
$EXT_IF 192.168.1.0/24 206.124.146.179
|
||||||
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE</programlisting>
|
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE</programlisting>
|
||||||
|
|
||||||
<para><filename>/etc/shorewall/proxyarp</filename>:</para>
|
<para><filename>/etc/shorewall/proxyarp</filename>:</para>
|
||||||
|
Loading…
Reference in New Issue
Block a user