forked from extern/shorewall_code
Update NAT article for 5.0
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
parent
6a8a229342
commit
9cae0243a5
@ -60,7 +60,7 @@
|
|||||||
|
|
||||||
<para>The following figure represents a one-to-one NAT environment.</para>
|
<para>The following figure represents a one-to-one NAT environment.</para>
|
||||||
|
|
||||||
<graphic fileref="images/staticnat.png" />
|
<graphic fileref="images/staticnat.png"/>
|
||||||
|
|
||||||
<para>One-to-one NAT can be used to make the systems with the 10.1.1.*
|
<para>One-to-one NAT can be used to make the systems with the 10.1.1.*
|
||||||
addresses appear to be on the upper (130.252.100.*) subnet. If we assume
|
addresses appear to be on the upper (130.252.100.*) subnet. If we assume
|
||||||
@ -105,7 +105,7 @@
|
|||||||
<quote>yes</quote> then you must NOT configure your own
|
<quote>yes</quote> then you must NOT configure your own
|
||||||
alias(es).</para>
|
alias(es).</para>
|
||||||
|
|
||||||
<para></para>
|
<para/>
|
||||||
</note>
|
</note>
|
||||||
|
|
||||||
<note>
|
<note>
|
||||||
@ -126,8 +126,7 @@
|
|||||||
would need the following entry in
|
would need the following entry in
|
||||||
<filename>/etc/shorewall/rules</filename>:</para>
|
<filename>/etc/shorewall/rules</filename>:</para>
|
||||||
|
|
||||||
<programlisting>#ACTION SOURCE DEST PROTO DEST SOURCE ORIG
|
<programlisting>#ACTION SOURCE DEST PROTO DPORT SPORT ORIGDEST
|
||||||
# PORT(S) PORT(S) DEST
|
|
||||||
ACCEPT net loc:10.1.1.2 tcp 80 - 130.252.100.18</programlisting>
|
ACCEPT net loc:10.1.1.2 tcp 80 - 130.252.100.18</programlisting>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user