mirror of
https://gitlab.com/shorewall/code.git
synced 2024-11-08 08:44:05 +01:00
A couple more documentation tweaks for 3.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2870 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
4941106825
commit
d5a79c2156
@ -498,10 +498,7 @@ tls-remote gateway.shorewall.net
|
||||
|
||||
client
|
||||
|
||||
route-gateway 192.168.1.254
|
||||
|
||||
up /etc/openvpn/wireless.up
|
||||
down /etc/openvpn/wireless.down
|
||||
redirect-gateway
|
||||
|
||||
ca /etc/certs/cacert.pem
|
||||
|
||||
@ -521,20 +518,6 @@ persist-key
|
||||
mute-replay-warnings
|
||||
|
||||
verb 3</programlisting>
|
||||
|
||||
<para>/etc/openvpn/wireless.up changes the default gateway to
|
||||
192.168.1.254:</para>
|
||||
|
||||
<programlisting>ip route replace default via 192.168.1.254 dev tap0</programlisting>
|
||||
|
||||
<para>/etc/openvpn/wireless.down restores the default gateway to
|
||||
192.168.3.254. Note that this command requires privilege and hence we
|
||||
do not include "user nobody" and "group nobody" in
|
||||
/etc/openvpn/wireless.conf.</para>
|
||||
|
||||
<para>/etc/openvpn/wireless.down:</para>
|
||||
|
||||
<programlisting>ip route replace default via 192.168.3.254 dev eth0</programlisting>
|
||||
</section>
|
||||
|
||||
<section>
|
||||
|
@ -67,7 +67,7 @@
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para>I use one-to-one NAT for Ursa (my personal system that run SuSE
|
||||
9.3) - Internal address 192.168.1.5 and external address
|
||||
10.0) - Internal address 192.168.1.5 and external address
|
||||
206.124.146.178.</para>
|
||||
</listitem>
|
||||
|
||||
@ -79,10 +79,10 @@
|
||||
|
||||
<listitem>
|
||||
<para>I use SNAT through 206.124.146.176 for my Wife's Windows XP
|
||||
system <quote>Tarry</quote>, and our dual-booting (SuSE
|
||||
9.3/Windows XP) laptop <quote>Tipper</quote> which connects through
|
||||
the Wireless Access Point (wap) via a Wireless Bridge (wet), and my
|
||||
work laptop when it is not docked in my office.<note>
|
||||
system <quote>Tarry</quote>, and our SuSE 10.0 laptop
|
||||
<quote>Tipper</quote> which connects through the Wireless Access Point
|
||||
(wap) via a Wireless Bridge (wet), and my work laptop (eastepnc6000)
|
||||
when it is not docked in my office.<note>
|
||||
<para>While the distance between the WAP and where I usually use
|
||||
the laptop isn't very far (50 feet or so), using a WAC11 (CardBus
|
||||
wireless card) has proved very unsatisfactory (lots of lost
|
||||
@ -98,7 +98,7 @@
|
||||
|
||||
<itemizedlist>
|
||||
<listitem>
|
||||
<para>Squid runs on the firewall and is configured as a transparent
|
||||
<para>Squid runs on the DMZ server and is configured as a transparent
|
||||
proxy.</para>
|
||||
</listitem>
|
||||
</itemizedlist>
|
||||
|
Loading…
Reference in New Issue
Block a user