mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-22 14:20:40 +01:00
Add more IPv6 configuration info
This commit is contained in:
parent
236269eafc
commit
ac4349e930
@ -575,7 +575,7 @@ iface mac inet6 v4tunnel
|
|||||||
font). <emphasis role="bold">This is not a complete
|
font). <emphasis role="bold">This is not a complete
|
||||||
configuration.</emphasis></para>
|
configuration.</emphasis></para>
|
||||||
|
|
||||||
<para>/etc/shorewall/zones:</para>
|
<para><filename>/etc/shorewall/zones</filename>:</para>
|
||||||
|
|
||||||
<programlisting>#ZONE TYPE
|
<programlisting>#ZONE TYPE
|
||||||
fw firewall
|
fw firewall
|
||||||
@ -584,7 +584,7 @@ drct:loc ipv4 #Direct internet access
|
|||||||
net ipv4 #Internet
|
net ipv4 #Internet
|
||||||
<emphasis role="bold">vpn ipv4 </emphasis> #OpenVPN clients</programlisting>
|
<emphasis role="bold">vpn ipv4 </emphasis> #OpenVPN clients</programlisting>
|
||||||
|
|
||||||
<para>/etc/shorewall/interfaces:</para>
|
<para><filename>/etc/shorewall/interfaces</filename>:</para>
|
||||||
|
|
||||||
<programlisting>#ZONE INTERFACE BROADCAST OPTIONS
|
<programlisting>#ZONE INTERFACE BROADCAST OPTIONS
|
||||||
loc INT_IF detect dhcp,logmartians=1,routefilter=1,physical=$INT_IF,required,wait=5
|
loc INT_IF detect dhcp,logmartians=1,routefilter=1,physical=$INT_IF,required,wait=5
|
||||||
@ -595,7 +595,7 @@ net COM_IF detect dhcp,blacklist,optional,routefilter=0,logmartians,pr
|
|||||||
- EXT_IF - ignore
|
- EXT_IF - ignore
|
||||||
- lo - ignore</programlisting>
|
- lo - ignore</programlisting>
|
||||||
|
|
||||||
<para>/etc/shorewall/tunnels:</para>
|
<para><filename>/etc/shorewall/tunnels</filename>:</para>
|
||||||
|
|
||||||
<programlisting>#TYPE ZONE GATEWAY GATEWAY
|
<programlisting>#TYPE ZONE GATEWAY GATEWAY
|
||||||
# ZONE
|
# ZONE
|
||||||
@ -606,7 +606,7 @@ net COM_IF detect dhcp,blacklist,optional,routefilter=0,logmartians,pr
|
|||||||
<para>Similarly, here are exerpts from the Shorewall6
|
<para>Similarly, here are exerpts from the Shorewall6
|
||||||
configuration.</para>
|
configuration.</para>
|
||||||
|
|
||||||
<para>/etc/shorewall6/zones:</para>
|
<para><filename>/etc/shorewall6/zones</filename>:</para>
|
||||||
|
|
||||||
<programlisting>#ZONE TYPE OPTIONS IN OUT
|
<programlisting>#ZONE TYPE OPTIONS IN OUT
|
||||||
# OPTIONS OPTIONS
|
# OPTIONS OPTIONS
|
||||||
@ -615,7 +615,7 @@ net ipv6
|
|||||||
<emphasis role="bold">loc ipv6</emphasis>
|
<emphasis role="bold">loc ipv6</emphasis>
|
||||||
rest ipv6</programlisting>
|
rest ipv6</programlisting>
|
||||||
|
|
||||||
<para>/etc/shorewall6/interfaces:</para>
|
<para><filename>/etc/shorewall6/interfaces</filename>:</para>
|
||||||
|
|
||||||
<programlisting>#ZONE INTERFACE BROADCAST OPTIONS
|
<programlisting>#ZONE INTERFACE BROADCAST OPTIONS
|
||||||
net sit1 detect tcpflags,forward=1,nosmurfs,routeback
|
net sit1 detect tcpflags,forward=1,nosmurfs,routeback
|
||||||
|
Loading…
Reference in New Issue
Block a user