On Fri, Dec 20, 2019 at 10:05:04AM +0200, Tuomo Soini wrote: > On Thu, 21 Nov 2019 14:00:31 -0500 > Bill Shirley <b...@ultrapoly.polymerindustries.biz> wrote: > > > 2) For the SNAT ACTION on the snat man page, there is an example > > using IPv4 addresses: Example: 206.124.146.177-206.124.146.180 > > This example should probably use IPv6 addresses. > > > > I was comparing the above with the documentation for Shorewall 4.6, > > which is what I use (shorewall6-4.6.11.1-2.fc22.noarch), to implement > > masquerading: http://www.shorewall.net/manpages6/shorewall6-masq.html > > 3) Under the ADDRESS directive, it has an error: Example: > > [2001:470:a:227::2]-[2001:470:a:227::10]:1000-1010 Which generates: > > ERROR: Correct address range syntax is '[<addr1>-<addr2>]' > > /etc/shorewall6/masq (line 115) > > > > What actually works is: > > [2001:470:a:227::2-2001:470:a:227::10]:1000-1010 > > Note: the internal ']-[' should be just a dash '-'. > > Ok. That is really a bug in shorewall ipv6 range parser. > I have created an issue in GitLab to capture this: https://gitlab.com/shorewall/code/issues/3
Regards, -Roberto -- Roberto C. Sánchez http://people.connexer.com/~roberto http://www.connexer.com _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
