Hi,
This subject has been brought up in the forum, but it''s a bit
different.
If I have a set of tun interfaces. I already defined tun+ as zone A, and I have
excluded tun15 as zone B (a subset of zone A).
I need to add tun16 to zone B.
My config:
/etc/shorewall/interfaces:
A tun+ - routeback
B tun15
/etc/shorewall/
A ipv4
B:A ipv4
I tried to define in /etc/shorewall/interfaces:
A tun+ - routeback
B tun15,tun16
Thank you.
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what''s new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Lito Kusnadi wrote:> Hi, > > This subject has been brought up in the forum, but it''s a bit different. > > If I have a set of tun interfaces. I already defined tun+ as zone A, and I have excluded tun15 as zone B (a subset of zone A). > I need to add tun16 to zone B. > > My config: > /etc/shorewall/interfaces: > A tun+ - routeback > B tun15 > > /etc/shorewall/ > A ipv4 > B:A ipv4 > > I tried to define in /etc/shorewall/interfaces: > A tun+ - routeback > B tun15,tun16/etc/shorewall/interfaces: B tun15 B tun16 - From ''man shorewall-interfaces'': If there are multiple interfaces to the same zone, you must list them in separate entries. Example: #ZONE INTERFACE BROADCAST loc eth1 - loc eth2 - - -Tom - -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkqOBwcACgkQO/MAbZfjDLJtQwCgusE4x0joCxGamQpP3Q/ZveCd S68An2vDwLZcW/cSRErR0YH6ADkZggf0 =CxMz -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what''s new with Crystal Reports now. http://p.sf.net/sfu/bobj-july
Lito Kusnadi
2009-Aug-21 04:31 UTC
Re: Multiple interfaces in a zone (not a standard case)
Thanks Tom. Didn''t catch that in the doco. Sorry for the double posting. --- On Fri, 8/21/09, Tom Eastep <teastep@shorewall.net> wrote:> From: Tom Eastep <teastep@shorewall.net> > Subject: Re: [Shorewall-users] Multiple interfaces in a zone (not a standard case) > To: "Shorewall Users" <shorewall-users@lists.sourceforge.net> > Date: Friday, August 21, 2009, 3:31 AM > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Lito Kusnadi wrote: > > Hi, > > > > This subject has been brought up in the forum, but > it''s a bit different. > > > > If I have a set of tun interfaces. I already defined > tun+ as zone A, and I have excluded tun15 as zone B (a > subset of zone A). > > I need to add tun16 to zone B. > > > > My config: > > /etc/shorewall/interfaces: > > A tun+ > - > routeback > > B tun15 > > > > /etc/shorewall/ > > A ipv4 > > B:A ipv4 > > > > I tried to define in /etc/shorewall/interfaces: > > A tun+ > - > routeback > > B tun15,tun16 > > /etc/shorewall/interfaces: > > B tun15 > B tun16 > > - From ''man shorewall-interfaces'': > > If there are > multiple interfaces to the same zone, you must > > list them in separate > entries. > > Example: > > > #ZONE INTERFACE > BROADCAST > > loc eth1 > - > > loc eth2 > - > > - -Tom > - -- > Tom Eastep \ When I die, I want > to go like my Grandfather who > Shoreline, \ died > peacefully in his sleep. Not screaming like > Washington, USA \ all of the > passengers in his car > http://shorewall.net > \________________________________________________ > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iEYEARECAAYFAkqOBwcACgkQO/MAbZfjDLJtQwCgusE4x0joCxGamQpP3Q/ZveCd > S68An2vDwLZcW/cSRErR0YH6ADkZggf0 > =CxMz > -----END PGP SIGNATURE----- > > ------------------------------------------------------------------------------ > Let Crystal Reports handle the reporting - Free Crystal > Reports 2008 30-Day > trial. Simplify your report design, integration and > deployment - and focus on > what you do best, core application coding. Discover what''s > new with > Crystal Reports now. http://p.sf.net/sfu/bobj-july > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users >------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what''s new with Crystal Reports now. http://p.sf.net/sfu/bobj-july