On 10/09/2015 07:11 AM, jonetsu wrote: > Hello, > > > When having a complex TC configuration for both IPv4 and IPv6, > setting TC_ENABLED=Internal in both Shorewall .conf files seems > natural. Is this the way to proceed ? >
You want TC_ENABLED=Internal in one configuration and TC_ENABLED=Shared in the other. See shorewall.conf (5) and shorewall6.conf (5). You then created symbolic links from the configuration with the 'shared' setting to the tcdevices and tcclasses files in the other configuration. Also note the warnings about the settings for CLEAR_TC in both files. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users