holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Interface lists in masq and nat files -- man pages

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@8069 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2008-01-15 02:47:32 +00:00
parent 545dd7dbc3
commit da02d6d9af
2 changed files with 20 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
manpages/shorewall-masq.xml
View File

@ -42,20 +42,22 @@
<variablelist>
<varlistentry>
<term><emphasis role="bold">INTERFACE</emphasis> — [<emphasis
role="bold">+</emphasis>]<emphasis>interface</emphasis>[<emphasis
role="bold">+</emphasis>]<emphasis>interfacelist</emphasis>[<emphasis
role="bold">:</emphasis>[<emphasis>digit</emphasis>]][<emphasis
role="bold">:</emphasis>[<emphasis>address</emphasis>[<emphasis
role="bold">,</emphasis><emphasis>address</emphasis>]...[<emphasis>exclusion</emphasis>]]</term>
<listitem>
<para>Outgoing <emphasis>interface</emphasis>. This is usually your
internet interface. If ADD_SNAT_ALIASES=Yes in <ulink
url="shorewall.conf.html">shorewall.conf</ulink>(5), you may add ":"
and a <emphasis>digit</emphasis> to indicate that you want the alias
added with that name (e.g., eth0:0). This will allow the alias to be
displayed with ifconfig. <emphasis role="bold">That is the only use
for the alias name; it may not appear in any other place in your
Shorewall configuratio</emphasis>n.</para>
<para>Outgoing <emphasis>interfacelist</emphasis>. Prior to
Shorewall 4.1.4, this must be a single interface name; in 4.1.4 and
later, this may be a comma-separated list of interface names. This
is usually your internet interface. If ADD_SNAT_ALIASES=Yes in
<ulink url="shorewall.conf.html">shorewall.conf</ulink>(5), you may
add ":" and a <emphasis>digit</emphasis> to indicate that you want
the alias added with that name (e.g., eth0:0). This will allow the
alias to be displayed with ifconfig. <emphasis role="bold">That is
the only use for the alias name; it may not appear in any other
place in your Shorewall configuratio</emphasis>n.</para>
<para>The interface may be qualified by adding the character ":"
followed by a comma-separated list of destination host or subnet

13
manpages/shorewall-nat.xml
View File

@ -57,11 +57,11 @@
<varlistentry>
<term><emphasis role="bold">INTERFACE</emphasis> —
<emphasis>interface</emphasis>[<emphasis
<emphasis>interfacelist</emphasis>[<emphasis
role="bold">:</emphasis>[<emphasis>digit</emphasis>]]</term>
<listitem>
<para>Interface that has the <emphasis
<para>Interfacees that have the <emphasis
role="bold">EXTERNAL</emphasis> address. If ADD_IP_ALIASES=Yes in
<ulink url="shorewall.conf.html">shorewall.conf</ulink>(5),
Shorewall will automatically add the EXTERNAL address to this
@ -70,8 +70,13 @@
want Shorewall to add the alias with this name (e.g., "eth0:0").
That allows you to see the alias with ifconfig. <emphasis
role="bold">That is the only thing that this name is good for -- you
cannot use it anwhere else in your Shorewall
configuration.</emphasis></para>
cannot use it anwhere else in your Shorewall configuration.
</emphasis></para>
<para>Prior to Shorewall 4.1.4,
<replaceable>interfacelist</replaceable> must be a single interface
name. Beginning with Shorewall-perl 4.1.4, Shorewall-perl users may
specify a comma-separated list of interfaces.</para>
<para>If you want to override ADD_IP_ALIASES=Yes for a particular
entry, follow the interface name with ":" and no digit (e.g.,