shorewall-devel March 2011 archive
Main Archive Page > Month Archives  > shorewall-devel archives
shorewall-devel: Re: [Shorewall-devel] [Shorewall-users] VRRP an

Re: [Shorewall-devel] [Shorewall-users] VRRP and Keepalived

From: James <purpleidea_at_nospam>
Date: Mon Mar 14 2011 - 17:15:19 GMT
To: shorewall-devel <shorewall-devel@lists.sourceforge.net>

On Sat, 2011-03-12 at 08:09 -0800, Tom Eastep wrote:
>
> # This macro handles VRRP traffic
> ################################################################################
> PARAM SOURCE DEST:224.0.0.18 vrrp
>
> with rules:
>
> VRRP(ACCEPT) $FW net
> VRRP(ACCEPT) net:<other ip> $FW
> VRRP(ACCEPT) $FW loc
> VRRP/ACCEPT) loc:<other ip> $FW

This is very elegant, shorewall has great macros! I tested this and it
works perfectly. I've attached a copy for inclusion into shorewall (in
case it hasn't been done already) If devel would prefer an actual git
patch, then please let me know.

James

PS: I cleaned up the formatting slightly to make the macro more
readable...

------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d

_______________________________________________
Shorewall-devel mailing list
Shorewall-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-devel