On 9/3/2014 7:21 AM, PGNd wrote:
>
>
> On Wed, Sep 3, 2014, at 06:56 AM, Tom Eastep wrote:
>> The example in the Multi-ISP document assumes that EXT_IF and COM_IF are
>> shell variables initialized in /etc/shorewall/params. The compiler does
>> not automatically create shell variables from logical interface names.
>
> Noted.
>
> Since my base definition of those interfaces occurs in /interfaces,
>
> /interfaces
> ?FORMAT 2
> net EXTIF optional,physical=eth0,...
> vpn1 VPNIF optional,physical=tun1,...
>
> this, then, would 2nd instance of the declaration, and may cause collisions
> (?).
>
> /params
> EXTIF=eth0
> VPNIF=tun1
>
> what'd be the 'cleanest' method/place to declare the shell vars, and --
> ideally -- avoid any reducndancy?
>
> Though a bit 'kludgy', I believe this should (?) work,
>
> /params
> EXTIF_SHELLVAR=eth0
> VPNIF_SHELLVAR=tun1
>
> /interfaces
> ?FORMAT 2
> net EXTIF optional,physical=$EXTIF_SHELLVAR,... <=======
> NOT SURE abt this usage
> vpn1 VPNIF optional,physical=$VPNIF_SHELLVAR,...
>
> /lib.private
> ...
> start_lsm() {
> ...
> device=$EXTIF_SHELLVAR
> ...
> device=$INTIF_SHELLVAR
> ...
> }
> ...
>
> where EXTIF & VPNIF are, then, used throughout the SW config files, and
> $EXTIF_SHELLVAR & $VPNIF_SHELLVAR are used, uniquely, in lib.private.That's what I do. See http://www.shorewall.net/MultiISP.html#idp8731271328 -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
