holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Update shorewall-snat(5)

Browse Source 
- Delete incorrect statement about a list of addresses in SNAT()
- Replace IPv4 Example 6 with one that uses the PROBABILITY column

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2020-09-24 11:19:12 -07:00
parent d363809859
commit 2e7d1ac4a3
No known key found for this signature in database
GPG Key ID: 96E6B3F2423A4D10
1 changed files with 7 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
Shorewall/manpages/shorewall-snat.xml
View File

@ -207,9 +207,6 @@
the IP addresses configured on the interface named in the DEST the IP addresses configured on the interface named in the DEST
column and substitute them in this column.</para> column and substitute them in this column.</para>
<para>Finally, you may also specify a comma-separated list of
ranges and/or addresses in this column.</para>
<para>DNS Names names are not allowed.</para> <para>DNS Names names are not allowed.</para>
<para>Normally, Netfilter will attempt to retain the source <para>Normally, Netfilter will attempt to retain the source
@ -805,21 +802,16 @@
<term>IPv4 Example 6:</term> <term>IPv4 Example 6:</term>
<listitem> <listitem>
<para>SNAT outgoing connections on eth0 from 192.168.1.0/24 in <para>SNAT outgoing connections on eth0 from 192.168.1.0/24 randomly
round-robin fashion between addresses 1.1.1.1, 1.1.1.3, and 1.1.1.9 to addresses 1.1.1.1, 1.1.1.3, and 1.1.1.9 (Shorewall 5.0.0 and
(Shorewall 4.5.9 and later).</para> later).</para>
<programlisting>/etc/shorewall/tcrules: <programlisting>/etc/shorewall/snat:
#ACTION SOURCE DEST PROTO DPORT SPORT USER TEST
1-3:CF 192.168.1.0/24 eth0 ; state=NEW
/etc/shorewall/snat:
#ACTION SOURCE DEST #ACTION SOURCE DEST
SNAT(1.1.1.1) 192.168.1.0/24 eth0 { mark=1:C } SNAT(1.1.1.1) 192.168.1.0/24 eth0 { probability=0.33 }
SNAT(1.1.1.3) 192.168.1.0/24 eth0 { mark=2:C } SNAT(1.1.1.3) 192.168.1.0/24 eth0 { probability=0.50 }
SNAT(1.1.1.9) 192.168.1.0/24 eth0 { mark=3:C }</programlisting> SNAT(1.1.1.9) 192.168.1.0/24 eth0</programlisting>
</listitem> </listitem>
</varlistentry> </varlistentry>