On 6/18/2014 10:36 AM, Rodrigo Cortes wrote:

> i have latest shorewall installed (4.6.1.1) with centos 6.5 x64
>  
> in nat file have
> 
> IP1 eth1:1          X1    no              no
> IP2 eth1:2          X2    yes             no
> IP3 eth1:3          X3    no              no
> IP4 eth1:4           X4   yes             no
> #IP5        eth1:5           X5    no             no
>  
> in the rules file have rules like:
> 
> HTTP(ACCEPT)    wan             lan:X2
>  
> eth1 is the wan and eth0 is the lan
> 
> ifconfig and ip addr show dev eth1 show ok the info.
> 
> but when eth1:5 is up and nat is activated the info for this device
> change and nat dont work
>  
> ifconfig eth1:5 before nat
>  
> eth1:5    Link encap:Ethernet  HWaddr 00:25:90:67:06:C7
>           inet addr:IP5 Bcast:xxx.xxx.xxx.xxx Mask:255.255.255.240
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           Memory:fbd60000-fbd80000
> 
> ifconfig eth1:5 after nat
>  
> eth1:5    Link encap:Ethernet  HWaddr 00:25:90:67:06:C7
>           inet addr:IP5 Bcast:0.0.0.0  Mask:255.255.255.255
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           Memory:fbd60000-fbd80000
> 
> ​ip addr show dev eth1
> 
> inet IP5/32 scope global eth1:5 
> net IP5/28 brd xxx.xxx.xxx.xxx scope global secondary eth1:5
>  
> Some idea why!?

What is the setting of ADD_IP_ALIASES in shorewall.conf?

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions
Find What Matters Most in Your Big Data with HPCC Systems
Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.
Leverages Graph Analysis for Fast Processing & Easy Data Exploration
http://p.sf.net/sfu/hpccsystems
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to