extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-04-10 18:58:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add warning about default routes to multi-interface HOWTOs

Browse Source
This commit is contained in:
Tom Eastep 2009-11-22 09:28:45 -08:00
parent 5b02ef68a5
commit c1001d7cc9
2 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/three-interface.xml
View File

@ -460,6 +460,12 @@ root@lists:~# </programlisting>
against</emphasis>.</para> against</emphasis>.</para>
</caution> </caution>
<caution>
<para><emphasis role="bold">Do not configure a default route on your
internal and DMZ interfaces.</emphasis> Your firewall should have
exactly one default route via your ISP's Router.</para>
</caution>
<para><inlinegraphic fileref="images/BD21298_.gif" format="GIF" /></para> <para><inlinegraphic fileref="images/BD21298_.gif" format="GIF" /></para>
<para>The Shorewall three-interface sample configuration assumes that the <para>The Shorewall three-interface sample configuration assumes that the

4
docs/two-interface.xml
View File

@ -418,6 +418,10 @@ root@lists:~# </programlisting>
for all interfaces connected to the common hub/switch. <emphasis for all interfaces connected to the common hub/switch. <emphasis
role="bold">Using such a setup with a production firewall is strongly role="bold">Using such a setup with a production firewall is strongly
recommended against</emphasis>.</para> recommended against</emphasis>.</para>
</warning><warning>
<para><emphasis role="bold">Do not configure a default route on your
internal interface.</emphasis> Your firewall should have exactly one
default route via your ISP's Router.</para>
</warning> <inlinegraphic fileref="images/BD21298_.gif" </warning> <inlinegraphic fileref="images/BD21298_.gif"
format="GIF" /></para> format="GIF" /></para>