If SNAT:O, traffic originating on the firewall and leaving via INTERFACE with a sourceĪddress in NET1 has it's source address rewritten to the corresponding address in If SNAT:P, traffic entering via INTERFACE with a destination address in NET1 has it's If DNAT:P, traffic entering via INTERFACE and addressed to NET1 has its destinationĪddress rewritten to the corresponding address in NET2. To NET1 has its destination address rewritten to the corresponding address in NET2. If DNAT:O, traffic originating on the firewall and leaving via INTERFACE and addressed Source address rewritten to the corresponding address in NET2. If SNAT or SNAT:T, traffic leaving INTERFACE with a source address in NET1 has it's If DNAT or DNAT:P, traffic entering INTERFACE and addressed to NET1 has itsĭestination address rewritten to the corresponding address in NET2. Your kernel and iptables (see the output of shorewall show capabilities). Stateless NAT requires Rawpost Table support in Must be DNAT or SNAT beginning with Shorewall 4.4.23, may be optionally followed by Name in parentheses, the different name is used in the alternate specification syntax).
The columns in the file are as follows (where the column name is followed by a different To use this file, your kernel and iptables must have NETMAP support included. This file is used to map addresses in one network to corresponding addresses in a second SYNOPSIS /etc/shorewall/netmap DESCRIPTION Netmap - Shorewall NETMAP definition file
0 kommentar(er)
