holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Add fw->nat masq rules to multi-ISP doc

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3215 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-01-03 01:21:10 +00:00
parent ca96f6f8df
commit 8232d950b8
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Shorewall-docs2/MultiISP.xml
View File

@ -49,7 +49,7 @@
ethernet interfaces to two different ISPs as in the following ethernet interfaces to two different ISPs as in the following
diagram.</para> diagram.</para>
<graphic fileref="images/TwoISPs.png" /> <graphic align="left" fileref="images/TwoISPs.png" />
<itemizedlist> <itemizedlist>
<listitem> <listitem>
@ -265,7 +265,7 @@
have multiple internet connections, we recommend that you have multiple internet connections, we recommend that you
specify 'balance' even if you don't need it. You can still specify 'balance' even if you don't need it. You can still
use entries in <filename>/etc/shorewall/tcrules</filename> use entries in <filename>/etc/shorewall/tcrules</filename>
to force traffic to one provider or another. </para> to force traffic to one provider or another.</para>
</important> </important>
</listitem> </listitem>
</varlistentry> </varlistentry>
@ -414,6 +414,14 @@ net eth1 detect …</programlisting>
<programlisting>#SOURCE DESTINATION POLICY LIMIT:BURST <programlisting>#SOURCE DESTINATION POLICY LIMIT:BURST
net net DROP</programlisting> net net DROP</programlisting>
<para>Regardless of whether you have masqueraded hosts or not, <emphasis
role="bold">YOU MUST ADD THESE TWO ENTRIES TO
<filename>/etc/shorewall/masq</filename></emphasis>:</para>
<programlisting>#INTERFACE SUBNET ADDRESS
eth0 130.252.99.27 206.124.146.176
eth1 206.124.146.176 130.252.99.27</programlisting>
<para>If you have masqueraded hosts, be sure to update <para>If you have masqueraded hosts, be sure to update
<filename>/etc/shorewall/masq</filename> to masquerade to both ISPs. For <filename>/etc/shorewall/masq</filename> to masquerade to both ISPs. For
example, if you masquerade all hosts connected to <filename example, if you masquerade all hosts connected to <filename