extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-04-03 12:20:34 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add warning about default routes to multi-interface HOWTOs

Browse Source
This commit is contained in:
Tom Eastep 2009-11-22 09:28:45 -08:00
parent 5b02ef68a5
commit c1001d7cc9
2 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
docs/three-interface.xml
View File

@ -460,6 +460,12 @@ root@lists:~# </programlisting>
against</emphasis>.</para> against</emphasis>.</para>
</caution> </caution>
<caution>
<para><emphasis role="bold">Do not configure a default route on your
internal and DMZ interfaces.</emphasis> Your firewall should have
exactly one default route via your ISP's Router.</para>
</caution>
<para><inlinegraphic fileref="images/BD21298_.gif" format="GIF" /></para> <para><inlinegraphic fileref="images/BD21298_.gif" format="GIF" /></para>
<para>The Shorewall three-interface sample configuration assumes that the <para>The Shorewall three-interface sample configuration assumes that the
@ -1135,4 +1141,4 @@ ACCEPT net $FW tcp 80 </programlisting><it
url="starting_and_stopping_shorewall.htm">Operating Shorewall and url="starting_and_stopping_shorewall.htm">Operating Shorewall and
Shorewall Lite</ulink> contains a lot of useful operational hints.</para> Shorewall Lite</ulink> contains a lot of useful operational hints.</para>
</section> </section>
</article> </article>

6
docs/two-interface.xml
View File

@ -418,6 +418,10 @@ root@lists:~# </programlisting>
for all interfaces connected to the common hub/switch. <emphasis for all interfaces connected to the common hub/switch. <emphasis
role="bold">Using such a setup with a production firewall is strongly role="bold">Using such a setup with a production firewall is strongly
recommended against</emphasis>.</para> recommended against</emphasis>.</para>
</warning><warning>
<para><emphasis role="bold">Do not configure a default route on your
internal interface.</emphasis> Your firewall should have exactly one
default route via your ISP's Router.</para>
</warning> <inlinegraphic fileref="images/BD21298_.gif" </warning> <inlinegraphic fileref="images/BD21298_.gif"
format="GIF" /></para> format="GIF" /></para>
@ -1142,4 +1146,4 @@ eth0 wlan0</programlisting>
requires the rules listed in the <ulink url="samba.htm">Shorewall/Samba requires the rules listed in the <ulink url="samba.htm">Shorewall/Samba
documentation</ulink>.</para> documentation</ulink>.</para>
</section> </section>
</article> </article>