On Sat, Apr 16, 2016, at 04:36 PM, Tom Eastep wrote:
> > So, how do I correctly get that value to be set at run-time on the target 
> > machine, so that I get *its* eth0-assigned IP?
> 
> http://www.shorewall.org/configuration_file_basics.htm#AddressVariables

JUST found that too.

IIUC, then if I want the external 'eth0' interface's IP address, I can use 
either of these

        ./interfaces
                net EXT_IF physical=eth0, ...
        ./rules
                ACCEPT     $FW:&EXT_IF ...

OR

        ./init
                IPv4_0=$( /usr/sbin/shorewall-lite call 
find_first_interface_address_if_any eth0 )
        ./rules
                ACCEPT     $FW:&{IPv4_0} ...

Is that correct?

If yes, is one approach recommended for any reason over the other?

Jason

------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to