[Shorewall-users] Re: Multi-ISP - individual rules?

[Paul G. <pg...@re...>]

Chris Mason (Lists) wrote:
> Now that I have Multi-ISP working, is it the case that all rules DNAT
> rules for the net zone apply to both interfaces? I'd like to DNAT a web
> cam so that it is available on the ADSL connection, but does that make
> it also available on the primary connection?

It works for all interfaces in the zone.  If you want more control,
specify the source address in the DNAT rule as well as the destination.

It's usually a good thing that it works that way, so that's the default
behaviour.  e.g. My DMZ mail server has 3 listed MX records on the
outside that are DNATed to it with one rule.

Paul