On Thu, 21 Nov 2019 14:00:31 -0500 Bill Shirley <b...@ultrapoly.polymerindustries.biz> wrote:
> 1) On this page: http://www.shorewall.net/Manpages6.html > there is no snat link. However, the man page does exist: > http://www.shorewall.net/manpages6/shorewall6-snat.html Ok. I have answers for you. On shorewall 5.2 man pages for shorewall and shorewall6 are same. Manpages6.html is old shorewall 5.0 documentation page. Manpages.html is correct page you should be using and it has all the links so there is no problem. > 2) For the SNAT ACTION on the snat man page, there is an example > using IPv4 addresses: Example: 206.124.146.177-206.124.146.180 > This example should probably use IPv6 addresses. > > I was comparing the above with the documentation for Shorewall 4.6, > which is what I use (shorewall6-4.6.11.1-2.fc22.noarch), to implement > masquerading: http://www.shorewall.net/manpages6/shorewall6-masq.html > 3) Under the ADDRESS directive, it has an error: Example: > [2001:470:a:227::2]-[2001:470:a:227::10]:1000-1010 Which generates: > ERROR: Correct address range syntax is '[<addr1>-<addr2>]' > /etc/shorewall6/masq (line 115) > > What actually works is: > [2001:470:a:227::2-2001:470:a:227::10]:1000-1010 > Note: the internal ']-[' should be just a dash '-'. Ok. That is really a bug in shorewall ipv6 range parser. -- Tuomo Soini <t...@foobar.fi> Foobar Linux services +358 40 5240030 Foobar Oy <https://foobar.fi/> _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
