diff --git a/docs/FAQ.xml b/docs/FAQ.xml
index 2f97afdab..c8a820351 100644
--- a/docs/FAQ.xml
+++ b/docs/FAQ.xml
@@ -2710,6 +2710,8 @@ Shorewall has detected the following iptables/netfilter capabilities:
LOG Target: Available
Persistent SNAT: Available
gateway:~#
+
+
@@ -2748,14 +2750,16 @@ loc $FW ACCEPT
- My local network is 172.20.1.0/24 so I set the IP address in
+ My local network is 172.20.1.0/24, so I set the IP address in
the modem to 172.20.1.2.
The IP address of my firewall's interface to the LAN is
- 172.20.1.254. I added the following two configuration
- entries:
+ 172.20.1.254. The logical name of the DSL interface is EXT_IF and my
+ LAN interface is INT_IF.
+
+ I added the following two configuration entries:
/etc/shorewall/masq:
@@ -2770,6 +2774,47 @@ EXT_IF:172.20.1.2 0.0.0.0/0 172.20.1.254
#ADDRESS INTERFACE EXTERNAL HAVEROUTE PERSISTENT
172.20.1.2 EXT_IF INT_IF no yes
+
+
+
+
+ If you can't change the IP address of your modem and its current
+ address isn't in your local network, then you need to change this
+ slightly; assuming that the modem IP address is 192.168.1.1:
+
+
+
+ Do not include an entry in
+ /etc/shorewall/proxyarp.
+
+
+
+ Add an IP address in 192.168.1.0/24 to your external interface
+ using your configuration's network management tools. For
+ Debian-based systems, that means adding this to the interface's
+ stanza in /etc/network/interfaces:
+
+ post-up /sbin/ip addr add 192.168.1.254/24 dev external-interface
+
+
+
+ Add a host route to 192.168.1.1 out of your external interface
+ using your configuration's network management tools. On Debian-based
+ systems, that means adding this to the interfaces's stanza in
+ /etc/network/interfaces:
+
+ post-up /sbin/ip route add 192.168.1.1/32 dev external-interface src 192.168.1.254
+
+
+
+ Your entry in /etc/shorewall/masq would
+ then be:
+
+ #INTERFACE SOURCE ADDRESS
+
+COMMENT DSL Modem
+
+EXT_IF:192.168.1.1 0.0.0.0/0 192.168.1.254