Erwin Van de Velde wrote: > On Monday 10 December 2007, Tom Eastep wrote: >> Why would you need marks? The outgoing interface is specified explicitly in >> /etc/shorewall/masq. > > If I understand this correctly, all trafic with the source defined in the > masq > rules but leaving the firewall through another interface does not get NAT'ed?
It is true that if you don't have a masq rule that covers certain traffic then that traffic will not have its source IP address rewritten. But that doesn't have anything to do with packet marks. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- SF.Net email is sponsored by: Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
