-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 08/04/2016 09:08 AM, Hill, John wrote:

> 
> I rewrote the DNAT rule to redirect from only one interface and it
> works.
> 
> 
> 
> OLD: DNAT          net    local:192.168.xxx.xx x           tcp
> 1723
> 
> DNAT          net    local:192.168.xxx.xxx            47
> 
> NEW:DNAT         net    local:192.168.xxx.xx x           tcp
>  1723           -         12.xxx.xxx.xxx
> 
> DNAT          net    local:192.168.xxx.xxx            47 -
> -         12.xxx.xxx.xxx
> 
> 
> 
> I was planning on moving VPN traffic to this interface exclusively
> anyway.
> 

Glad you got it working -- but to my eye, the OLD and NEW are
identical :-)

- -Tom
- -- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org
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=3Mcq
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to