mirror of
https://gitlab.com/shorewall/code.git
synced 2025-01-03 03:59:16 +01:00
Add note about dynamic IP addresses to the Multi-ISP doc
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3739 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
5575c75a99
commit
f7219371f5
@ -15,7 +15,7 @@
|
|||||||
</author>
|
</author>
|
||||||
</authorgroup>
|
</authorgroup>
|
||||||
|
|
||||||
<pubdate>2006-02-26</pubdate>
|
<pubdate>2006-03-27</pubdate>
|
||||||
|
|
||||||
<copyright>
|
<copyright>
|
||||||
<year>2005</year>
|
<year>2005</year>
|
||||||
@ -438,6 +438,23 @@ net net DROP</programlisting>
|
|||||||
eth0 130.252.99.27 206.124.146.176
|
eth0 130.252.99.27 206.124.146.176
|
||||||
eth1 206.124.146.176 130.252.99.27</programlisting>
|
eth1 206.124.146.176 130.252.99.27</programlisting>
|
||||||
|
|
||||||
|
<note>
|
||||||
|
<para>If you have a Dynamic IP address on either of the interfaces,
|
||||||
|
you can use shell variables to construct the above rules. For example,
|
||||||
|
if <filename class="devicefile">eth0</filename> had a dynamic IP
|
||||||
|
address, then:</para>
|
||||||
|
|
||||||
|
<para><filename>/etc/shorewall/params</filename>:</para>
|
||||||
|
|
||||||
|
<programlisting>ETH0_IP=$(find_first_interface_address eth0)</programlisting>
|
||||||
|
|
||||||
|
<para>/etc/shorewall/masq:</para>
|
||||||
|
|
||||||
|
<programlisting>#INTERFACE SUBNET ADDRESS
|
||||||
|
eth0 130.252.99.27 $ETH0_IP
|
||||||
|
eth1 $ETH0_IP 130.252.99.27</programlisting>
|
||||||
|
</note>
|
||||||
|
|
||||||
<para>If you have masqueraded hosts, be sure to update
|
<para>If you have masqueraded hosts, be sure to update
|
||||||
<filename>/etc/shorewall/masq</filename> to masquerade to both ISPs. For
|
<filename>/etc/shorewall/masq</filename> to masquerade to both ISPs. For
|
||||||
example, if you masquerade all hosts connected to <filename
|
example, if you masquerade all hosts connected to <filename
|
||||||
|
Loading…
Reference in New Issue
Block a user