Re: why ADD_DNAT_ALIASES missing?

Tom Eastep
Tue, 10 Aug 2004 19:44:04 -0000

| hi,
| is there any reason why there is no such thing as ADD_DNAT_ALIASES in
| shorewall.conf or in rules (or am i just missed it)?

The answer hasn''t changed since I answered your question this morning!

| and some related questions:
| - is a line in masq file automaticaly add an accept rule too? eg. in
| msaq file
| eth0 <internal ip>

No.

| allow connection from <internal ip> (local zona) to the net zone
(eth0''s
| zone)?
| - is a line in the nat file automaticaly add an accept rule too? eg. in
| nat file:

No.

| <external ip> eth0:5  <internal ip>
| allow connection from BOTH <internal ip> (local zona) to the net zone
| (eth0''s zone) and from the net zone to the <internal ip>?
| or should i also have to add these to the rules file?
| i try to read all doc but these are not documented very well. some kind
| of advanced documentation would be useful for those how know the ip and
| iptables command .eg. "a dnat rule add such an iptables command"
etc.

Those who know now IP and iptables work can study the output of
"shorewall status" with the help of these two documents:

a) http://shorewall.net/PacketHandling.html
b) http://shorewall.net/NetfilterOverview.html

- -Tom
- --
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFBGSWEO/MAbZfjDLIRAqkJAJ40cUwQpW3VP8OaJ2BsRaMb44iWNQCdE/H3
4TPMdzrCM+gvM/nh+n2ldTM=T5VW