holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Try to clarify column usage in DNAT/REDIRECT rules

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@7507 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2007-10-22 16:00:33 +00:00
parent 8d81bfc05b
commit e8b1231f8a
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
manpages/shorewall-rules.xml
View File

@ -104,6 +104,26 @@
appear in the file then all rules are assumed to be in the NEW
section.</para>
<para>When defining rules that rewrite the destination IP address and/or
port number (namely DNAT and REDIRECT rules), it is important to keep
straight which columns in the file specify the packet before rewriting and
which specify how the packet will look after rewriting.</para>
<itemizedlist>
<listitem>
<para>The DEST column specifies the final destination for the packet
after rewriting and can include the final IP address and/or port
number.</para>
</listitem>
<listitem>
<para>The remaining columns specify characteristics of the packet
before rewriting. In particular, the ORIGINAL DEST column gives the
original destination IP address of the packet and the DEST PORT(S)
column give the original destination port(s).</para>
</listitem>
</itemizedlist>
<para>The columns in the file are as follows.</para>
<variablelist>