Doug White <[EMAIL PROTECTED]> writes:

> I am trying to set up a DHCP component to a network with Beta 2.
> 
> If I allow dhcp addresses, do I need to masquerade the interface to
> allow the dhcp addresses on the interenet.  I tried this using
> 
> 172.16.96.0/19!172.16.96.151,172.16.96.152

you cannot use commas in the web frontend. I might add a code like __ and
this will be translated into a comma in the backend ... 
 
> as the masq setup since I have several servers on that subnet that are
> static nat (151 and 152).  This causes major problems (errors when
> shorewall tries to restart).

I presume you have something like the following: 

172.16.96.0/19!172.16.96.151,


which generates a shorewall error

> Any thoughts.
> 
> Secondly:
> 
> Where are the files used to generate "rules" in /etc/shorewall/rules.
> 
> It says to edit the template file but the template file is a script and
> I couldn't figure out where the rules originate.  I want a way to backup
> just parts of the firewall (like the rules) without the entire
> configuration backup.


/usr/share/naat/templates/etc are the templates and they use the variables
from /var/lib/naat/configuration : RulesList in your case (be careful if
you edit that by hand because it's a huge single line) :o)

> I figured out a way to do this by editing the backup text file and
> inserting the rules I want there but it would be easier to just copy in
> the base files.

copy the RulesList line

-- 
Florin                          http://www.mandrakesoft.com
                                http://people.mandrakesoft.com/~florin/

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________

Reply via email to