On 6/7/20 12:53 PM, PGNet Dev wrote:
> if i define a static param value in
>
> /params
> MY_STATIC_IP=1.2.3.4
>
> i can use, e.g.,
>
> /snat
> SNAT($MY_STATIC_IP) ...
>
> if, instead I define an AddressVariable
>
> /init
> MY_DYN_IP=$( cat /some/path/to/latest_EXT_IP )
>
> is this, then, valid usage
>
> /snat
> SNAT(%{MY_DYN_IP}) ...
>
> ?
> Yes. As a general rule, address variables can be used anywhere that a host IP address can be used, unless documented otherwise. Note that your use case above can probably be handled by using &EXT_IF where EXT_IF is the logical name of the external interface. > reading @ > > https://shorewall.org/configuration_file_basics.htm#AddressVariables > > i _do_ see examples of the %{} in /rules, but not explicitly elsewhere, e.g., > in /snat.> -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster Shoreline, \ with an international standard? Washington, USA \ A: Someone who makes you an offer you http://shorewall.org \ can't understand \________________________________________
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
