From dd34b816fe8cd2cfccc349e33c7cd373ea267c55 Mon Sep 17 00:00:00 2001
From: Tom Eastep <teastep@shorewall.net>
Date: Sat, 23 May 2009 07:43:37 -0700
Subject: [PATCH] Correct highlighting in port forwarding addition

---
 docs/MultiISP.xml | 41 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)

diff --git a/docs/MultiISP.xml b/docs/MultiISP.xml
index 54590b046..9f1a92d5c 100644
--- a/docs/MultiISP.xml
+++ b/docs/MultiISP.xml
@@ -780,6 +780,47 @@ eth1             0.0.0.0/0         130.252.99.27</programlisting>
 2               $FW             0.0.0.0/0       tcp     25</programlisting>
     </section>
 
+    <section id="PortForwarding">
+      <title>Port Forwarding</title>
+
+      <para>Shorewall provides considerable flexibility for port forwarding in
+      a multi-ISP environment.</para>
+
+      <para>Normal port forwarding rules such as the following will forward
+      from both providers.</para>
+
+      <para><filename>/etc/shorewall/rules</filename>:</para>
+
+      <programlisting>#ACTION        SOURCE             DEST              PROTO     DEST PORT(S)     SOURCE       ORIGINAL
+#                                                                              PORTS(S)     DEST
+DNAT           net                loc:192.168.1.3   tcp       25</programlisting>
+
+      <para>Continuing the above example, to forward only connection requests
+      from ISP 1, you can either:</para>
+
+      <orderedlist>
+        <listitem>
+          <para>Qualify the SOURCE by ISP 1's interface:</para>
+
+          <programlisting>#ACTION        SOURCE             DEST              PROTO     DEST PORT(S)     SOURCE       ORIGINAL
+#                                                                              PORTS(S)     DEST
+DNAT           net<emphasis role="bold">:eth0</emphasis>           loc:192.168.1.3   tcp       25</programlisting>
+
+          <para>or</para>
+        </listitem>
+
+        <listitem>
+          <para>Specify the IP address of ISP 1 in the ORIGINAL DEST
+          column:</para>
+
+          <programlisting>#ACTION        SOURCE             DEST              PROTO     DEST PORT(S)     SOURCE       ORIGINAL
+#                                                                              PORTS(S)     DEST
+DNAT           net                loc:192.168.1.3   tcp       25               <emphasis
+              role="bold">-            206.124.146.176</emphasis></programlisting>
+        </listitem>
+      </orderedlist>
+    </section>
+
     <section id="morethan2">
       <title>More than 2 Providers</title>