The columns in the file are as follows.
ADDRESS - address
- IP Address.
INTERFACE - interface (Optional as of Shorewall 4.4.16)
- Local interface where system with the ip address in ADDRESS is connected. This column is only required when HAVEROUTE is set to No (no) or is left empty.
EXTERNAL - interface
- External Interface to be used to access this system from the Internet.
HAVEROUTE - [-|Yes|No]
- If there is already a route from the firewall to the host whose address is given, enter Yes or yes in this column. Otherwise, enter no or No or leave the column empty and Shorewall will add the route for you. If Shorewall adds the route, its persistence depends on the value of thePERSISTENT column contains Yes; otherwise, shorewall stop or shorewall clear will delete the route.
PERSISTENT - [-|Yes|No]
- If HAVEROUTE is No or no, then the value of this column determines if the route added by Shorewall persists after a shorewall stop or a shorewall clear. If this column contains Yes or yes then the route persists; If the column is empty or contains No or no then the route is deleted by shorewall stop or shorewall clear.
Host with IP 184.108.40.206 is connected to interface eth1 and we want hosts attached via eth0 to be able to access it using that address.
#ADDRESS INTERFACE EXTERNAL 220.127.116.11 eth1 eth0