On Sunday 18 September 2011 14:31:28 Tom Eastep wrote: > Beta 1 is now available for testing. > > 1) Stateless NAT is now available in Shorewall6. See > shorewall6-netmap(5) for details. > > Thank you for testing, > -Tom
Tom Man page shorewall6-netmap refers to the last two columns as DEST PORT(S). Their description suggests that the first is destination port(s) and the second source port(S). However, the following shorewall6 netmap entry: DNAT:P 2001:4d48:ad51:24::/64 eth0 fd58:b443:dd9e:1::/64 - tcp 22 1000 generates the following ip6tables rule: -A eth0_pre -p 6 --dport 1000 --sport 22 -d 2001:4d48:ad51:24::/64 -j RAWDNAT --to-dest fd58:b443:dd9e:1::/64 This seems to show the source port(s) column is first and destination port(s) second. Steven. ------------------------------------------------------------------------------ BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA http://p.sf.net/sfu/rim-devcon-copy2 _______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
