Re: Shorewall

gg-csf_at_dmztest.vsr.ambisys.net
Date: 06/29/05


Date: 28 Jun 2005 20:27:20 -0700

Take a look at the documentation for /etc/shorewall/hosts. What you
probably want is something like:

/etc/shorewall/zones:

   loc Loc Local
   net Net Internet

Note that the ordering of the zones there is important. The loc zone
must be defined first.

/etc/shorewall/hosts:

   loc eth0:192.168.0.0/24
   net eth0:0.0.0.0/0

Note that you can also use this file to set different options for the
zones.

/etc/shorewall/intefaces:

   - eth0 detect blacklist,routefilter,tcpflags

Note the hyphen instead of the zone name there.

Check out http://www.shorewall.net/Multiple_Zones.html for more
details.

G



Relevant Pages

  • Re: Shorewall
    ... > loc Loc Local ... > net Net Internet ... > Note that the ordering of the zones there is important. ... Fill what's empty, empty what's full, scratch where it itches. ...
    (comp.os.linux.networking)
  • [SLE] Re: newbie-Win98 - SuSE - Share Internet
    ... A normal setup would be eth0 as the internet-facing card and eth1 as the ... You would then have three zones: ... net, fw and loc. ... These are the internet, ...
    (SuSE)