This file was added in Shorewall 4.4.16 and is used to define
Proxy NDP. There is one entry in this file for each IPv6 address to be
proxied.
The columns in the file are as follows.
ADDRESS - address
IPv6 Address.
INTERFACE - interface (Optional)
Local interface where system with the ip address in
ADDRESS is connected. Only required when the HAVEROUTE column is left empty or
is set to no or No.
EXTERNAL - interface
External Interface to be used to access this system from
the Internet.
HAVEROUTE - [-|Yes|No]
If there is already a route from the firewall to the host
whose address is given, enter Yes or yes in this column.
Otherwise, enter no or No or leave the column empty and
Shorewall will add the route for you. If Shorewall6 adds the route, its
persistence depends on the value of thePERSISTENT column contains
Yes; otherwise, shorewall6 stop or shorewall clear6 will
delete the route.
PERSISTENT - [-|Yes|No]
If HAVEROUTE is No or no, then the value of
this column determines if the route added by Shorewall persists after a
shorewall6 stop or a shorewall6 clear. If this column contains
Yes or yes then the route persists; If the column is empty or
contains No or no then the route is deleted by shorewall6
stop or shorewall6 clear.
Example 1:
Host with IPv6 2001:470:b:227::44 is connected to
interface eth1 and we want hosts attached via eth0 to be able to access it
using that address.
#ADDRESS INTERFACE EXTERNAL
2001:470:b:227::44 eth1 eth0
https://shorewall.org/configuration_file_basics.htm#Pairs[1]
shorewall6(8), shorewall6-accounting(5), shorewall6-actions(5),
shorewall6-blacklist(5), shorewall6-exclusion(5), shorewall6-hosts(5),
shorewall6-interfaces(5), shorewall6-maclist(5), shorewall6-nesting(5),
shorewall6-netmap(5),shorewall6-params(5), shorewall6-policy(5),
shorewall6-providers(5), shorewall6-rtrules(5), shorewall6-routestopped(5),
shorewall6-rules(5), shorewall6.conf(5), shorewall6-secmarks(5),
shorewall6-tcclasses(5), shorewall6-tcdevices(5), shorewall6-mangle(5),
shorewall6-tos(5), shorewall6-tunnels(5), shorewall6-zones(5)
- 1.
- https://shorewall.org/configuration_file_basics.htm#Pairs
https://shorewall.org/configuration_file_basics.htm#Pairs