Hello all,
The reserved addresses list seems to be in flux more lately. Since I have
several servers that all run Shorewall, updating /etc/shorewall/rfc1918
has become a little tedious. I put together a shell script that can
download the latest file, write a new /etc/shorewall/rfc1918 and restart
Shorewall.
I run this from a cron job and now don''t have to pay much attention to
keeping this part fresh. If anyone would like to play with it, there is
a tarball at:
http://www.blackflute.com/update-rfc1918.tgz
The config is all in the executable (update-rfc1918) and the defaults
are for Debian Woody systems. Edit update-rfc1918, test it and put in
root''s crontab (to allow restarting Shorewall).
There is certainly a much more elegant way to implement virtually
everything contained above but it works for me. If I missed something
please let me know.
Have fun,
-Tom