forked from extern/shorewall_code
A couple more documentation tweaks for 3.0
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2870 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
4941106825
commit
d5a79c2156
@ -498,10 +498,7 @@ tls-remote gateway.shorewall.net
|
|||||||
|
|
||||||
client
|
client
|
||||||
|
|
||||||
route-gateway 192.168.1.254
|
redirect-gateway
|
||||||
|
|
||||||
up /etc/openvpn/wireless.up
|
|
||||||
down /etc/openvpn/wireless.down
|
|
||||||
|
|
||||||
ca /etc/certs/cacert.pem
|
ca /etc/certs/cacert.pem
|
||||||
|
|
||||||
@ -521,20 +518,6 @@ persist-key
|
|||||||
mute-replay-warnings
|
mute-replay-warnings
|
||||||
|
|
||||||
verb 3</programlisting>
|
verb 3</programlisting>
|
||||||
|
|
||||||
<para>/etc/openvpn/wireless.up changes the default gateway to
|
|
||||||
192.168.1.254:</para>
|
|
||||||
|
|
||||||
<programlisting>ip route replace default via 192.168.1.254 dev tap0</programlisting>
|
|
||||||
|
|
||||||
<para>/etc/openvpn/wireless.down restores the default gateway to
|
|
||||||
192.168.3.254. Note that this command requires privilege and hence we
|
|
||||||
do not include "user nobody" and "group nobody" in
|
|
||||||
/etc/openvpn/wireless.conf.</para>
|
|
||||||
|
|
||||||
<para>/etc/openvpn/wireless.down:</para>
|
|
||||||
|
|
||||||
<programlisting>ip route replace default via 192.168.3.254 dev eth0</programlisting>
|
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
<section>
|
<section>
|
||||||
|
@ -67,7 +67,7 @@
|
|||||||
<itemizedlist>
|
<itemizedlist>
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>I use one-to-one NAT for Ursa (my personal system that run SuSE
|
<para>I use one-to-one NAT for Ursa (my personal system that run SuSE
|
||||||
9.3) - Internal address 192.168.1.5 and external address
|
10.0) - Internal address 192.168.1.5 and external address
|
||||||
206.124.146.178.</para>
|
206.124.146.178.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
|
|
||||||
@ -79,10 +79,10 @@
|
|||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>I use SNAT through 206.124.146.176 for my Wife's Windows XP
|
<para>I use SNAT through 206.124.146.176 for my Wife's Windows XP
|
||||||
system <quote>Tarry</quote>, and our dual-booting (SuSE
|
system <quote>Tarry</quote>, and our SuSE 10.0 laptop
|
||||||
9.3/Windows XP) laptop <quote>Tipper</quote> which connects through
|
<quote>Tipper</quote> which connects through the Wireless Access Point
|
||||||
the Wireless Access Point (wap) via a Wireless Bridge (wet), and my
|
(wap) via a Wireless Bridge (wet), and my work laptop (eastepnc6000)
|
||||||
work laptop when it is not docked in my office.<note>
|
when it is not docked in my office.<note>
|
||||||
<para>While the distance between the WAP and where I usually use
|
<para>While the distance between the WAP and where I usually use
|
||||||
the laptop isn't very far (50 feet or so), using a WAC11 (CardBus
|
the laptop isn't very far (50 feet or so), using a WAC11 (CardBus
|
||||||
wireless card) has proved very unsatisfactory (lots of lost
|
wireless card) has proved very unsatisfactory (lots of lost
|
||||||
@ -98,7 +98,7 @@
|
|||||||
|
|
||||||
<itemizedlist>
|
<itemizedlist>
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>Squid runs on the firewall and is configured as a transparent
|
<para>Squid runs on the DMZ server and is configured as a transparent
|
||||||
proxy.</para>
|
proxy.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
</itemizedlist>
|
</itemizedlist>
|
||||||
|
Loading…
Reference in New Issue
Block a user