On Mon, 12 Aug 2002, Nixon, Anthony S. wrote: > Hello, > > I am using the Bering version of LEAF (a most excellent creation I might > add). I have multiple subnets on my LAN, but do not know how to set up the > firewall for this? The firewall sits on a 192.168.1.0/24 subnet and my users > are on 192.168.2.0/24 and 192.168.3.0/24 respectively. I am used to using > Red Hat and creating the static-routes file in /etc/sysconfig. How is this > done under Bering (debian dist) and can it be set up with the Shorewall > package? Any help would be appreciated. >
For Shorewall: In /etc/shorewall/masq, you'll need three entries -- one for each subnet (Shorewall can only detect a single subnet). Assuming that your external interface is eth0: eth0 192.168.1.0/24 eth0 192.168.2.0/24 eth0 192.168.3.0/24 In /etc/shorewall/interfaces (assuming your internal interface is eth1): loc eth1 192.168.1.255,192.168.2.255,192.168.3.255 The latter just causes Shorewall to drop the broadcasts from all three subnets rather than logging them. -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ [EMAIL PROTECTED] ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
