On Sun, Oct 31, 2010 at 12:39:02PM -0700, peasth...@shaw.ca wrote: > From: lee <l...@yun.yagibdah.d.> > Date: Sat, 30 Oct 2010 17:09:36 +0200 > > /etc/shorewall/masq, "eth0 172.24.0.0/16" means that subnets > 172.24.0.0/16 are hidden behind eth0; not that eth0 is behind 172.24.0.0.
Sorry, you´re right, it´s the outgoing interface(s) that need to be put there, not the interface(s) to which the local zones are connected. > > Keep things simple. > > Absolutely. Preceeding paragraph is an example. I'll tackle > remaining errors as time is available. Well, does it work now? Looks like it should ... -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20101101151338.ga29...@yun.yagibdah.de