diff --git a/Shorewall2/bogons b/Shorewall2/bogons index 0ca59aeeb..a628499bd 100644 --- a/Shorewall2/bogons +++ b/Shorewall2/bogons @@ -9,6 +9,9 @@ # as 'reserved' by the IANA, the DHCP Autoconfig class B, and the class C # reserved for use in documentation and examples. # +# DO NOT MODIFY THIS FILE. IF YOU NEED TO MAKE CHANGES, COPY THE FILE +# TO /etc/shorewall AND MODIFY THE COPY. +# # Columns are: # # SUBNET The subnet (host addresses also allowed) diff --git a/Shorewall2/netmap b/Shorewall2/netmap index b9f250422..8b57af253 100644 --- a/Shorewall2/netmap +++ b/Shorewall2/netmap @@ -4,33 +4,35 @@ # # /etc/shorewall/netmap # -# This file is used to map a network on one interface to another -# different interface. For a /24 network, it is like having 256 entries -# in the /etc/shorewall/nat file. +# This file is used to map addresses in one network to corresponding +# addresses in a second network. # # WARNING: To use this file, your kernel and iptables must have # NETMAP support included. # # Columns must be separated by white space and are: # -# NET1 Network 1 in CIDR format (e.g., 192.168.1.0/24) +# TYPE Must be DNAT or SNAT. # -# INTERFACE The network interface to NET1. The interface must +# If DNAT, traffic entering INTERFACE and addressed to +# NET1 has it's destination address rewritten to the +# corresponding address in NET2. +# +# If SNAT, traffic leaving INTERFACE with a source +# address in NET1 has it's source address rewritten to +# the corresponding address in NET2. +# +# NET1 Network in CIDR format (e.g., 192.168.1.0/24) +# +# INTERFACE The name of a network interface. The interface must # be defined in /etc/shorewall/interfaces. # -# NET2 Network 2 in CIDR format +# NET2 Network in CIDR format # -# Example: +# See http://shorewall.net/netmap.html for an example and usage +# information. # -# NET1 INTERFACE NET2 -# 192.168.1.0/24 eth0 10.1.1.0/24 -# -# Packets entering on eth0 with destination address 192.168.1.n will -# be modified to have destination IP address 10.1.1.n. -# -# Packets leaving on eth0 with source IP address 10.1.1.n will be -# modified to have source IP address 192.168.1.n. ############################################################################## -#NET1 INTERFACE NET2 +#TYPE NET1 INTERFACE NET2 # #LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE diff --git a/Shorewall2/rfc1918 b/Shorewall2/rfc1918 index 3d873b323..42bd82e3d 100644 --- a/Shorewall2/rfc1918 +++ b/Shorewall2/rfc1918 @@ -7,6 +7,9 @@ # # The default list includes those IP addresses listed in RFC 1918. # +# DO NOT MODIFY THIS FILE. IF YOU NEED TO MAKE CHANGES, COPY THE FILE +# TO /etc/shorewall AND MODIFY THE COPY. +# # Columns are: # # SUBNET The subnet (host addresses also allowed)