-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
On 12/22/19 4:23 PM, Roberto C. Sánchez wrote: > On Fri, Dec 20, 2019 at 10:05:04AM +0200, Tuomo Soini wrote: >> On Thu, 21 Nov 2019 14:00:31 -0500 Bill Shirley >> <b...@ultrapoly.polymerindustries.biz> wrote: >> >>> 2) For the SNAT ACTION on the snat man page, there is an >>> example using IPv4 addresses: Example: >>> 206.124.146.177-206.124.146.180 This example should probably >>> use IPv6 addresses. >>> >>> I was comparing the above with the documentation for Shorewall >>> 4.6, which is what I use (shorewall6-4.6.11.1-2.fc22.noarch), >>> to implement masquerading: >>> http://www.shorewall.net/manpages6/shorewall6-masq.html 3) >>> Under the ADDRESS directive, it has an error: Example: >>> [2001:470:a:227::2]-[2001:470:a:227::10]:1000-1010 Which >>> generates: ERROR: Correct address range syntax is >>> '[<addr1>-<addr2>]' /etc/shorewall6/masq (line 115) >>> >>> What actually works is: >>> [2001:470:a:227::2-2001:470:a:227::10]:1000-1010 Note: the >>> internal ']-[' should be just a dash '-'. >> >> Ok. That is really a bug in shorewall ipv6 range parser. >> > I have created an issue in GitLab to capture this: > https://gitlab.com/shorewall/code/issues/3 > And I have coded and tested a fix. From this point forward, I think that I would like to submit fixes to gitlab, but let it be the new team who decides when to release either point releases or new minor/major releases. I will keep the fix in my local repository until the direction is clear. - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________ -----BEGIN PGP SIGNATURE----- Comment: GPGTools - http://gpgtools.org iQIzBAEBCgAdFiEEFNMNR63CLO6yqbL8luaz8kI6TRAFAl4AQJEACgkQluaz8kI6 TRBh2A/+NcwQBYdfV4on+TMdXD7UQ5zZl5/0wZ3jkR87KuvSTShSeH7DYjA4QPs8 G/eMazXo6puejLRVVh7e3aECqa84+pUZi8N4kW4nZUWnb8Xq6n0nCe6tBpH5FJpM UsdU1xLFmTwH88LMtAXaovfqfiedqvTCOrX4bVhIiiqhz/pEb5FC8quSH4G20cpM D+5BosmhuJcKJry8deTCMfjpszm/6oEdeGw62M1+hdQ5FlPBw8WF0q1e+Tg5Wf0f 8GZ1rZtPCVFUjvdd+gQs/pOYp4ViMZ1jrdMORqVRNehM9BfRHSwCi6CD69KJd1iN 120LIHrOlZiB5GKU0gEVlWKeDIEGa+JODZmBxwoQWRwHWDvkw0umt/Plqrp7DAz0 oCRdvjg7+s/nnvc0AZSqPG0JBv2AAb1hcJBvahEaOzz73xEgl5T5+/d4ISC3naC/ kMBonrQvFoK/m5n35j1B7j3WO+yaZBrhgMxCO7tohqLOmn7q7qt0QxORUxIoTY+O ceyHy1EHLwZ1vfOQbiWYGen5PqxKrQtmWRalpcVeNckbacE/V3f6xDn75mxG6fQH GFFoFDAbBwbsrccnAOZz3JQbceJ5a9t24PhylzCihMzQdwZ4n7WFAXPxqR1iZL72 IWhMHCNllQZOwCXEzo6RWY7vxJDdSvqU2xq/f1bpYKyrCTDRbU4= =rOeY -----END PGP SIGNATURE----- _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users