search for: intyerface

hi, is there any reason why there is no such thing as ADD_DNAT_ALIASES in shorewall.conf or in rules (or am i just missed it)? i think about it like in masq file if the masquaraded outgoing interface is different from the default firewall intyerface than i can use ip:<digit> where the digit is the alias number. since dnat is in the rules it can be used from there. eg: if would like to dnat all connection from the internet to an internal machine, that i do: DNAT net loc:$INTER_IP - - - $EXTER_IP but i wouldn''t like to add it to t...