# # Shorewall version 3.3 - Nat File # # /etc/shorewall/nat # # This file is used to define one-to-one Network Address Translation # (NAT). # # WARNING: If all you want to do is simple port forwarding, do NOT use this # file. See http://www.shorewall.net/FAQ.htm#faq1. Also, in most # cases, Proxy ARP is a better solution that one-to-one NAT. # # Columns are: # # EXTERNAL External IP Address - this should NOT be the primary # IP address of the interface named in the next # column and must not be a DNS Name. # # If you put COMMENT in this column, the rest of the # line will be attached as a comment to the Netfilter # rule(s) generated by the following entries in the # file. The comment will appear delimited by "/* ... */" # in the output of "shorewall show nat" # # To stop the comment from being attached to further # rules, simply include COMMENT on a line by itself. # # INTERFACE Interface that has the EXTERNAL address. # If ADD_IP_ALIASES=Yes in shorewall.conf, Shorewall # will automatically add the EXTERNAL address to this # interface. Also if ADD_IP_ALIASES=Yes, you may # follow the interface name with ":" and a digit to # indicate that you want Shorewall to add the alias # with this name (e.g., "eth0:0"). That allows you to # see the alias with ifconfig. THAT IS THE ONLY THING # THAT THIS NAME IS GOOD FOR -- YOU CANNOT USE IT # ANYWHERE ELSE IN YOUR SHORWALL CONFIGURATION. # # If you want to override ADD_IP_ALIASES=Yes for a # particular entry, follow the interface name with # ":" and no digit (e.g., "eth0:"). # INTERNAL Internal Address (must not be a DNS Name). # # ALL INTERFACES If Yes or yes, NAT will be effective from all hosts. # If No or no (or left empty) then NAT will be effective # only through the interface named in the INTERFACE # column # # LOCAL If Yes or yes, NAT will be effective from the firewall # system # # For additional information, see http://shorewall.net/NAT.htm # ############################################################################### #EXTERNAL INTERFACE INTERNAL ALL LOCAL # INTERFACES #LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE