On 4/16/2016 5:13 PM, [email protected] wrote: > > > On Sat, Apr 16, 2016, at 04:36 PM, Tom Eastep wrote: >>> So, how do I correctly get that value to be set at run-time on the target >>> machine, so that I get *its* eth0-assigned IP? >> >> http://www.shorewall.org/configuration_file_basics.htm#AddressVariables > > JUST found that too. > > IIUC, then if I want the external 'eth0' interface's IP address, I can use > either of these > > ./interfaces > net EXT_IF physical=eth0, ... > ./rules > ACCEPT $FW:&EXT_IF ... > > OR > > ./init > IPv4_0=$( /usr/sbin/shorewall-lite call > find_first_interface_address_if_any eth0 ) > ./rules > ACCEPT $FW:&{IPv4_0} ... > > Is that correct? > > If yes, is one approach recommended for any reason over the other?
The first requires less work from you :-) -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Find and fix application performance issues faster with Applications Manager Applications Manager provides deep performance insights into multiple tiers of your business applications. It resolves application problems quickly and reduces your MTTR. Get your free trial! https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
