From 44a34ceb95268591a4625bbc5f9ae1b95bad2af2 Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Wed, 23 Jul 2014 10:36:34 -0700
Subject: [PATCH] Add complex port-forwarding example to the aliased interfaces
 article

Signed-off-by: Tom Eastep <teastep@shorewall.net>
---
 docs/Shorewall_and_Aliased_Interfaces.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/docs/Shorewall_and_Aliased_Interfaces.xml b/docs/Shorewall_and_Aliased_Interfaces.xml
index 559e7c8b0..e28f98691 100644
--- a/docs/Shorewall_and_Aliased_Interfaces.xml
+++ b/docs/Shorewall_and_Aliased_Interfaces.xml
@@ -182,6 +182,13 @@ ACCEPT    net        $FW:206.124.146.178  tcp        22</programlisting></para>
       <programlisting>#ACTION   SOURCE     DEST                 PROTO      DEST PORT(S)   SOURCE    ORIGINAL
 #                                                                   PORT(S)   DEST
 DNAT      net        loc:192.168.1.3      tcp        80             -         206.124.146.178    </programlisting>
+
+      <para>If I wished to forward tcp port 10000 on that virtual interface to
+      port 22 on local host 192.168.1.3, the rule would be:</para>
+
+      <programlisting>#ACTION   SOURCE     DEST                 PROTO      DEST PORT(S)   SOURCE    ORIGINAL
+#                                                                   PORT(S)   DEST
+DNAT      net        loc:192.168.1.3:22   tcp        22             -         206.124.146.178    </programlisting>
     </section>
 
     <section id="SNAT">