Hi,

My net interface gets it's ip address dinamically asigned by a dhcp server.
Sometime I need that address for SNAT, DNAT rules and so on...
I use a variable throughout Shorewall that is defined in the params file.
Everytime that this ip change, I need to change it manually.

I'm currently testing the following to let Shorewall know about that new ip:

I have a script in /etc/dhcp/dhclient-exit-hooks that do:

case $reason in
    bound)
        echo $new_ip_address > /etc/shorewall/current_net_ip
        shorewall reload
        ;;
esac

then in /etc/shorewall/params:

CURRENT_NET_IP=$(cat /etc/shorewall/current_net_ip)

then I can use 'CURRENT_NET_Ip' throughout Shorewall.

I could clearly asign a fix address but for the sake of understanding...
Is there a better way to let shorewall know when my net interface gets a
new ip or fix address is the way to go?

-Matt
-- 
Matt Darfeuille

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to