mirror of
https://gitlab.com/shorewall/code.git
synced 2025-03-30 18:27:01 +02:00
Update the Proxy ARP article for 5.0
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
8fd7de3900
commit
c4e1cf2c2e
@ -84,7 +84,7 @@
|
|||||||
|
|
||||||
<para>The following figure represents a Proxy ARP environment.</para>
|
<para>The following figure represents a Proxy ARP environment.</para>
|
||||||
|
|
||||||
<graphic align="center" fileref="images/proxyarp.png" />
|
<graphic align="center" fileref="images/proxyarp.png"/>
|
||||||
|
|
||||||
<para>Proxy ARP can be used to make the systems with addresses
|
<para>Proxy ARP can be used to make the systems with addresses
|
||||||
130.252.100.18 and 130.252.100.19 appear to be on the upper
|
130.252.100.18 and 130.252.100.19 appear to be on the upper
|
||||||
@ -129,7 +129,7 @@
|
|||||||
irrelevant, one approach you can take is to make that address the same as
|
irrelevant, one approach you can take is to make that address the same as
|
||||||
the address of your external interface!</para>
|
the address of your external interface!</para>
|
||||||
|
|
||||||
<graphic align="center" fileref="images/proxyarp1.png" />
|
<graphic align="center" fileref="images/proxyarp1.png"/>
|
||||||
|
|
||||||
<para>In the diagram above, <filename class="devicefile">eth1</filename>
|
<para>In the diagram above, <filename class="devicefile">eth1</filename>
|
||||||
has been given the address 130.252.100.17, the same as
|
has been given the address 130.252.100.17, the same as
|
||||||
@ -142,8 +142,7 @@
|
|||||||
you have configured to be in the <emphasis role="bold">loc</emphasis> zone
|
you have configured to be in the <emphasis role="bold">loc</emphasis> zone
|
||||||
then you would need this entry in /etc/shorewall/rules:</para>
|
then you would need this entry in /etc/shorewall/rules:</para>
|
||||||
|
|
||||||
<programlisting>#ACTION SOURCE DEST PROTO DEST
|
<programlisting>#ACTION SOURCE DEST PROTO DPORT
|
||||||
# PORT
|
|
||||||
ACCEPT net loc:130.252.100.19 tcp 80</programlisting>
|
ACCEPT net loc:130.252.100.19 tcp 80</programlisting>
|
||||||
|
|
||||||
<warning>
|
<warning>
|
||||||
|
Loading…
Reference in New Issue
Block a user