On 10/09/2015 07:11 AM, jonetsu wrote:
> Hello,
> 
> 
> When having a complex TC configuration for both IPv4 and IPv6,
> setting TC_ENABLED=Internal in both Shorewall .conf files seems
> natural.  Is this the way to proceed ?
> 

You want TC_ENABLED=Internal in one configuration and TC_ENABLED=Shared
in the other. See shorewall.conf (5) and shorewall6.conf (5). You then
created symbolic links from the configuration with the 'shared' setting
to the tcdevices and tcclasses files in the other configuration.

Also note the warnings about the settings for CLEAR_TC in both files.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to