diff --git a/manpages/shorewall-masq.xml b/manpages/shorewall-masq.xml index 5e76339ab..c5e685774 100644 --- a/manpages/shorewall-masq.xml +++ b/manpages/shorewall-masq.xml @@ -42,20 +42,22 @@ INTERFACE — [+]interface[+]interfacelist[:[digit]][:[address[,address]...[exclusion]] - Outgoing interface. This is usually your - internet interface. If ADD_SNAT_ALIASES=Yes in shorewall.conf(5), you may add ":" - and a digit to indicate that you want the alias - added with that name (e.g., eth0:0). This will allow the alias to be - displayed with ifconfig. That is the only use - for the alias name; it may not appear in any other place in your - Shorewall configuration. + Outgoing interfacelist. Prior to + Shorewall 4.1.4, this must be a single interface name; in 4.1.4 and + later, this may be a comma-separated list of interface names. This + is usually your internet interface. If ADD_SNAT_ALIASES=Yes in + shorewall.conf(5), you may + add ":" and a digit to indicate that you want + the alias added with that name (e.g., eth0:0). This will allow the + alias to be displayed with ifconfig. That is + the only use for the alias name; it may not appear in any other + place in your Shorewall configuration. The interface may be qualified by adding the character ":" followed by a comma-separated list of destination host or subnet diff --git a/manpages/shorewall-nat.xml b/manpages/shorewall-nat.xml index b9ff28717..962aa689f 100644 --- a/manpages/shorewall-nat.xml +++ b/manpages/shorewall-nat.xml @@ -57,11 +57,11 @@ INTERFACE — - interface[interfacelist[:[digit]] - Interface that has the Interfacees that have the EXTERNAL address. If ADD_IP_ALIASES=Yes in shorewall.conf(5), Shorewall will automatically add the EXTERNAL address to this @@ -70,8 +70,13 @@ want Shorewall to add the alias with this name (e.g., "eth0:0"). That allows you to see the alias with ifconfig. That is the only thing that this name is good for -- you - cannot use it anwhere else in your Shorewall - configuration. + cannot use it anwhere else in your Shorewall configuration. + + + Prior to Shorewall 4.1.4, + interfacelist must be a single interface + name. Beginning with Shorewall-perl 4.1.4, Shorewall-perl users may + specify a comma-separated list of interfaces. If you want to override ADD_IP_ALIASES=Yes for a particular entry, follow the interface name with ":" and no digit (e.g.,