Kosta Velikov <[email protected]> wrote: > How do I accomplish this with Shorewall? In the masq file, I can exclude only > source addresses, and I cannot state any destinations?
Use the form : ethn:!subnet_address/mask int_subnet/mask ext_ip >From "man shorewall-masq" : > The interface may be qualified by adding the character > ":" followed by a comma-separated list of destination > host or subnet addresses to indicate that you only want > to change the source IP address for packets being sent to > those particular destinations. Exclusion is allowed (see > shorewall-exclusion[6](5)) as are ipset names preceded by > a plus sign '+'; ------------------------------------------------------------------------------ Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://p.sf.net/sfu/Zoho _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
