mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-24 19:51:40 +02:00
Interface lists in masq and nat files -- man pages
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8069 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
545dd7dbc3
commit
da02d6d9af
@ -42,20 +42,22 @@
|
|||||||
<variablelist>
|
<variablelist>
|
||||||
<varlistentry>
|
<varlistentry>
|
||||||
<term><emphasis role="bold">INTERFACE</emphasis> — [<emphasis
|
<term><emphasis role="bold">INTERFACE</emphasis> — [<emphasis
|
||||||
role="bold">+</emphasis>]<emphasis>interface</emphasis>[<emphasis
|
role="bold">+</emphasis>]<emphasis>interfacelist</emphasis>[<emphasis
|
||||||
role="bold">:</emphasis>[<emphasis>digit</emphasis>]][<emphasis
|
role="bold">:</emphasis>[<emphasis>digit</emphasis>]][<emphasis
|
||||||
role="bold">:</emphasis>[<emphasis>address</emphasis>[<emphasis
|
role="bold">:</emphasis>[<emphasis>address</emphasis>[<emphasis
|
||||||
role="bold">,</emphasis><emphasis>address</emphasis>]...[<emphasis>exclusion</emphasis>]]</term>
|
role="bold">,</emphasis><emphasis>address</emphasis>]...[<emphasis>exclusion</emphasis>]]</term>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>Outgoing <emphasis>interface</emphasis>. This is usually your
|
<para>Outgoing <emphasis>interfacelist</emphasis>. Prior to
|
||||||
internet interface. If ADD_SNAT_ALIASES=Yes in <ulink
|
Shorewall 4.1.4, this must be a single interface name; in 4.1.4 and
|
||||||
url="shorewall.conf.html">shorewall.conf</ulink>(5), you may add ":"
|
later, this may be a comma-separated list of interface names. This
|
||||||
and a <emphasis>digit</emphasis> to indicate that you want the alias
|
is usually your internet interface. If ADD_SNAT_ALIASES=Yes in
|
||||||
added with that name (e.g., eth0:0). This will allow the alias to be
|
<ulink url="shorewall.conf.html">shorewall.conf</ulink>(5), you may
|
||||||
displayed with ifconfig. <emphasis role="bold">That is the only use
|
add ":" and a <emphasis>digit</emphasis> to indicate that you want
|
||||||
for the alias name; it may not appear in any other place in your
|
the alias added with that name (e.g., eth0:0). This will allow the
|
||||||
Shorewall configuratio</emphasis>n.</para>
|
alias to be displayed with ifconfig. <emphasis role="bold">That is
|
||||||
|
the only use for the alias name; it may not appear in any other
|
||||||
|
place in your Shorewall configuratio</emphasis>n.</para>
|
||||||
|
|
||||||
<para>The interface may be qualified by adding the character ":"
|
<para>The interface may be qualified by adding the character ":"
|
||||||
followed by a comma-separated list of destination host or subnet
|
followed by a comma-separated list of destination host or subnet
|
||||||
|
@ -57,11 +57,11 @@
|
|||||||
|
|
||||||
<varlistentry>
|
<varlistentry>
|
||||||
<term><emphasis role="bold">INTERFACE</emphasis> —
|
<term><emphasis role="bold">INTERFACE</emphasis> —
|
||||||
<emphasis>interface</emphasis>[<emphasis
|
<emphasis>interfacelist</emphasis>[<emphasis
|
||||||
role="bold">:</emphasis>[<emphasis>digit</emphasis>]]</term>
|
role="bold">:</emphasis>[<emphasis>digit</emphasis>]]</term>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>Interface that has the <emphasis
|
<para>Interfacees that have the <emphasis
|
||||||
role="bold">EXTERNAL</emphasis> address. If ADD_IP_ALIASES=Yes in
|
role="bold">EXTERNAL</emphasis> address. If ADD_IP_ALIASES=Yes in
|
||||||
<ulink url="shorewall.conf.html">shorewall.conf</ulink>(5),
|
<ulink url="shorewall.conf.html">shorewall.conf</ulink>(5),
|
||||||
Shorewall will automatically add the EXTERNAL address to this
|
Shorewall will automatically add the EXTERNAL address to this
|
||||||
@ -70,8 +70,13 @@
|
|||||||
want Shorewall to add the alias with this name (e.g., "eth0:0").
|
want Shorewall to add the alias with this name (e.g., "eth0:0").
|
||||||
That allows you to see the alias with ifconfig. <emphasis
|
That allows you to see the alias with ifconfig. <emphasis
|
||||||
role="bold">That is the only thing that this name is good for -- you
|
role="bold">That is the only thing that this name is good for -- you
|
||||||
cannot use it anwhere else in your Shorewall
|
cannot use it anwhere else in your Shorewall configuration.
|
||||||
configuration.</emphasis></para>
|
</emphasis></para>
|
||||||
|
|
||||||
|
<para>Prior to Shorewall 4.1.4,
|
||||||
|
<replaceable>interfacelist</replaceable> must be a single interface
|
||||||
|
name. Beginning with Shorewall-perl 4.1.4, Shorewall-perl users may
|
||||||
|
specify a comma-separated list of interfaces.</para>
|
||||||
|
|
||||||
<para>If you want to override ADD_IP_ALIASES=Yes for a particular
|
<para>If you want to override ADD_IP_ALIASES=Yes for a particular
|
||||||
entry, follow the interface name with ":" and no digit (e.g.,
|
entry, follow the interface name with ":" and no digit (e.g.,
|
||||||
|
Loading…
x
Reference in New Issue
Block a user