Shorewall isn't psychic.

In the absolute simplest circumstances, yes a script could figure out
what you probably want based on how your interfaces are configured.

But those are trivial to set up anyhow.

What if you have multiple subnets on your local network?  What if you
have multiple IP addresses on your Internet facing interfaces?  There is
no way a script could accurately guess what you want in those
situations.



Thank you,

Bryan Vukich


On Wed, 2007-01-31 at 15:24 -0500, Brian J. Murrell wrote:
> I'm just starting to experiment with multi-isp configuration and at the
> part of the doc (http://www.shorewall.net/MultiISP.html) that specifies:
> 
>         Regardless of whether you have masqueraded hosts or not, YOU
>         MUST ADD THESE TWO ENTRIES TO /etc/shorewall/masq:
>         
>         #INTERFACE       SUBNET            ADDRESS
>         eth0             130.252.99.27     206.124.146.176
>         eth1             206.124.146.176   130.252.99.27
> 
> If this is a MUST requirement for all multi-isp set ups, then can
> shorewall not figure this out for itself and install it without the user
> having to specify it?
> 
> Just trying to reduce steps required to set this up in order to reduce
> possible points of erroneous configuration.
> 
> b.
> 
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier.
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________ Shorewall-users mailing list 
> [email protected] 
> https://lists.sourceforge.net/lists/listinfo/shorewall-users

Attachment: signature.asc
Description: This is a digitally signed message part

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to