On Wed, Sep 3, 2014, at 06:56 AM, Tom Eastep wrote:
> The example in the Multi-ISP document assumes that EXT_IF and COM_IF are
> shell variables initialized in /etc/shorewall/params. The compiler does
> not automatically create shell variables from logical interface names.

Noted.

Since my base definition of those interfaces occurs in /interfaces,

        /interfaces
                ?FORMAT 2
                net  EXTIF optional,physical=eth0,...
                vpn1 VPNIF optional,physical=tun1,...

this, then, would 2nd instance of the declaration, and may cause collisions (?).

        /params
                EXTIF=eth0
                VPNIF=tun1

what'd be the 'cleanest' method/place to declare the shell vars, and -- ideally 
-- avoid any reducndancy?

Though a bit 'kludgy', I believe this should (?) work,

        /params
                EXTIF_SHELLVAR=eth0
                VPNIF_SHELLVAR=tun1

        /interfaces
                ?FORMAT 2
                net  EXTIF optional,physical=$EXTIF_SHELLVAR,...    <======= 
NOT SURE abt this usage
                vpn1 VPNIF optional,physical=$VPNIF_SHELLVAR,...

        /lib.private
                ...
                start_lsm() {
                        ...
                        device=$EXTIF_SHELLVAR
                        ...
                        device=$INTIF_SHELLVAR
                        ...
                }
                ...

where EXTIF & VPNIF are, then, used throughout the SW config files, and 
$EXTIF_SHELLVAR & $VPNIF_SHELLVAR are used, uniquely, in lib.private.

------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to