1) On this page: http://www.shorewall.net/Manpages6.html there is no snat link. However, the man page does exist: http://www.shorewall.net/manpages6/shorewall6-snat.html
2) For the SNAT ACTION on the snat man page, there is an example using IPv4 addresses: Example: 206.124.146.177-206.124.146.180 This example should probably use IPv6 addresses. I was comparing the above with the documentation for Shorewall 4.6, which is what I use (shorewall6-4.6.11.1-2.fc22.noarch), to implement masquerading: http://www.shorewall.net/manpages6/shorewall6-masq.html 3) Under the ADDRESS directive, it has an error: Example: [2001:470:a:227::2]-[2001:470:a:227::10]:1000-1010 Which generates: ERROR: Correct address range syntax is '[<addr1>-<addr2>]' /etc/shorewall6/masq (line 115) What actually works is: [2001:470:a:227::2-2001:470:a:227::10]:1000-1010 Note: the internal ']-[' should be just a dash '-'. Thanks to all for creating/maintaining such a useful product. Bill _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
