Shorewall users - Sep 2005 - masq Confusion

I have the following in masq:

#INTERFACE              SUBNET          ADDRESS         PROTO   PORT 
(S) IPSEC
eth1                    eth1.6
#eth1                   br0
eth1                    0.0.0.0/0!66.46.199.128/29
eth1.5                  br0
eth1.5                  eth1.6

I have a host, 66.46.199.202, on br0, that is getting masqueraded out  
through eth1. 66.46.199.128/29 is the subnet on eth1, with the host  
in question being proxyarp''d to br0.

Before delving into this, is my syntax correct?

Shorewall 2.4.0

Thanks,

A.

-- 
Adam Sherman
Technologist
+1 (613) 482-2672
adam@sherman.ca




-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache''s Geronimo App Server.
Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php

On Wednesday 21 September 2005 09:08, Adam Sherman
wrote:
> I have the following in masq:
>
> #INTERFACE              SUBNET          ADDRESS         PROTO   PORT
> (S) IPSEC
> eth1                    eth1.6
> #eth1                   br0
> eth1                    0.0.0.0/0!66.46.199.128/29
> eth1.5                  br0
> eth1.5                  eth1.6
>
> I have a host, 66.46.199.202, on br0, that is getting masqueraded out
> through eth1. 66.46.199.128/29 is the subnet on eth1, with the host
> in question being proxyarp''d to br0.
>
> Before delving into this, is my syntax correct?
Your syntax is correct but 66.46.199.202 is not in 66.46.199.128/29 so it is 
working as expected.

gateway:/etc/test# shorewall ipcalc 66.46.199.128/29
   CIDR=66.46.199.128/29
   NETMASK=255.255.255.248
   NETWORK=66.46.199.128
   BROADCAST=66.46.199.135
gateway:/etc/test#           

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key