Tom Shorewall-netmap man page states that 'The interface must be defined in shorewall-interfaces(5)'
Shorewall-shell checks this and produces an error message if the interface is not defined shorewall-interfaces. Shorewall-perl does not check it. The upshot if this is, if the following netmap rule is defined: DNAT 192.168.0.0/24 garbage 192.168.20.0/24 shorewall-perl generates the following iptables rule: -A garbage_in -d 192.168.0.0/24 -j NETMAP --to 192.168.20.0/24 but nothing in the PREROUTING chain points to it. Steven. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
