I don't know how I missed that. It works.
Thanks.
> From: [email protected]
> Date: Tue, 21 Oct 2014 13:58:27 +0100
> To: [email protected]
> Subject: Re: [Shorewall-users] exclude DESTINATION network from masq?
>
> Kosta Velikov <[email protected]> wrote:
>
> > How do I accomplish this with Shorewall? In the masq file, I can exclude
> > only source addresses, and I cannot state any destinations?
>
> Use the form :
> ethn:!subnet_address/mask int_subnet/mask ext_ip
>
> >From "man shorewall-masq" :
> > The interface may be qualified by adding the character
> > ":" followed by a comma-separated list of destination
> > host or subnet addresses to indicate that you only want
> > to change the source IP address for packets being sent to
> > those particular destinations. Exclusion is allowed (see
> > shorewall-exclusion[6](5)) as are ipset names preceded by
> > a plus sign '+';
>
>
>
> ------------------------------------------------------------------------------
> Comprehensive Server Monitoring with Site24x7.
> Monitor 10 servers for $9/Month.
> Get alerted through email, SMS, voice calls or mobile push notifications.
> Take corrective actions from your mobile device.
> http://p.sf.net/sfu/Zoho
> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
------------------------------------------------------------------------------
Comprehensive Server Monitoring with Site24x7.
Monitor 10 servers for $9/Month.
Get alerted through email, SMS, voice calls or mobile push notifications.
Take corrective actions from your mobile device.
http://p.sf.net/sfu/Zoho
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
