On Wed, 2003-02-26 at 20:57, Florin wrote: > Hello again, > > eth1 should appear in the masq zone ... and not in the loc zone ... but > then you need an older kernel in order to have your masquerading working > because it's broken in the current kernel ... as I previously said. > How come you have it duplicated ? ... I cannot reproduce that here ... I > have 4 nics and they are not duplicated ...
Additional: I just verified that if I do "urpme shorewall" and then "rm -rf /etc/shorewall", so there's *no* existing shorewall configuration at all, and then run drakgw (allowing it to install a fresh copy of shorewall itself), it *still* generates an invalid /etc/shorewall/interfaces file placing eth1 in both the loc and masq zones. So it's not anything to do with the prior configuration of shorewall. -- adamw
