diff --git a/manpages/shorewall-masq.xml b/manpages/shorewall-masq.xml index 5f9d71564..e1ae62e71 100644 --- a/manpages/shorewall-masq.xml +++ b/manpages/shorewall-masq.xml @@ -484,12 +484,7 @@ DSL or cable modem and eth1 connects to your local network with subnet 192.168.0.0/24. - Your entry in the file can be either: - - #INTERFACE SOURCE - eth0 eth1 - - or + Your entry in the file will be: #INTERFACE SOURCE eth0 192.168.0.0/24 @@ -541,14 +536,15 @@ interface name in the SOURCE column): - You want all outgoing SMTP traffic entering the firewall on - eth1 to be sent from eth0 with source IP address 206.124.146.177. - You want all other outgoing traffic from eth1 to be sent from eth0 - with source IP address 206.124.146.176. + You want all outgoing SMTP traffic entering the firewall from + 172.20.1.0/29 to be sent from eth0 with source IP address + 206.124.146.177. You want all other outgoing traffic from + 172.20.1.0/29 to be sent from eth0 with source IP address + 206.124.146.176. - #INTERFACE SOURCE ADDRESS PROTO PORT(S) - eth0 eth1 206.124.146.177 tcp smtp - eth0 eth1 206.124.146.176 + #INTERFACE SOURCE ADDRESS PROTO PORT(S) + eth0 172.20.1.0/29 206.124.146.177 tcp smtp + eth0 172.20.1.0/29 206.124.146.176 The order of the above two rules is significant! @@ -572,8 +568,9 @@ shorewall-interfaces(5), shorewall-maclist(5), shorewall-nat(5), shorewall-netmap(5), shorewall-params(5), shorewall-policy(5), shorewall-providers(5), shorewall-proxyarp(5), shorewall-route_rules(5), - shorewall-routestopped(5), shorewall-rules(5), shorewall.conf(5), shorewall-secmarks(5), - shorewall-tcclasses(5), shorewall-tcdevices(5), shorewall-tcrules(5), - shorewall-tos(5), shorewall-tunnels(5), shorewall-zones(5) + shorewall-routestopped(5), shorewall-rules(5), shorewall.conf(5), + shorewall-secmarks(5), shorewall-tcclasses(5), shorewall-tcdevices(5), + shorewall-tcrules(5), shorewall-tos(5), shorewall-tunnels(5), + shorewall-zones(5)