On 08/07/2017 11:16 AM, Vieri Di Paola via Shorewall-users wrote: > > ________________________________ > From: Tom Eastep <[email protected]> > >>> Here's what I did in gw1's snat file: >>> >>> SNAT($IF_LAN_MASQ_ADDRESS) $IF_LAN_MASQ_SOURCE $IF_LAN >>> >>> The params file contains: >>> >>> IF_LAN=enp11s0 >>> IF_LAN_MASQ_ADDRESS=10.215.144.92 >>> IF_LAN_MASQ_SOURCE=172.16.0.2 > >> >> You wanted: >> SNAT($IF_LAN_MASQ_ADDRESS) $IF_LAN:$IF_LAN_MASQ_SOURCE - > > > I hope I copied it correctly: > > # tail -n 1 snat > SNAT($IF_LAN_MASQ_ADDRESS) $IF_LAN:$IF_LAN_MASQ_SOURCE - > > > However, this led to: > > # shorewall check > [...] > ERROR: DEST must be specified >
Sorry -- you were right the first time. However, there is no evidence in the dump that your rule was present. Chain POSTROUTING (policy ACCEPT 6197 packets, 498K bytes) pkts bytes target prot opt in out source destination 1658 84559 enp9s7_masq all -- * enp9s7 0.0.0.0/0 0.0.0.0/0 21154 1555K enp9s6_masq all -- * enp9s6 0.0.0.0/0 0.0.0.0/0 25208 1608K enp9s5_masq all -- * enp9s5 0.0.0.0/0 0.0.0.0/0 39343 3111K enp9s4_masq all -- * enp9s4 0.0.0.0/0 0.0.0.0/0 Note that enp11s0 is not listed. -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
