NethServer 6

I suggest to modify the NAT 1:1 behaviour so that it work with shorewall's masq module (and not nat) :

[root@nethserver ~]# cat /etc/e-smith/templates-custom/etc/shorewall/masq/15snat 
#
# 20nat
#
{
    # import db
    use esmith::NetworksDB;
    use NethServer::Firewall;

    # open db
    my $ndb = esmith::NetworksDB->open_ro();
    my $hdb = esmith::HostsDB->open_ro();
    my $fw = new NethServer::Firewall();

    # get aliases of red interfaces
    foreach my $j ($ndb->red) {
        my $red_inter = $j->key;
        foreach my $k ($ndb->aliases) {
            if($k->key =~ /^$red_inter:[\d]/) {
                push @red_aliases, $k;
            }
        }
    }

    # get info from db
    foreach my $i (@red_aliases) {
        # get alias interface name
        my $alias_interface = $i->key;

        # get interface name
        my @interface_parts = split /:/, $alias_interface;
        my $interface = $interface_parts[0];

        # get alias interface ip
        my $alias_interface_ip = $i->prop('ipaddr');    

        # get ip from firewall obj
        my $fw_obj = $i->prop('FwObjectNat');

        # if nat exist add it
        if($fw_obj ne "") {
            # get hostname
            $internal_ip = $fw->getAddress($fw_obj);

            # print config
            $OUT .= "$interface\t$internal_ip\t$alias_interface_ip\n";
        }
    }
}

what is the package to be tested? I guess nethserver-firewall-base-2.6.3-1.4.gae44624.ns6.noarch.rpm but just to be sure...

dz0 0te wrote:

what is the package to be tested? I guess nethserver-firewall-base-2.6.3-1.4.gae44624.ns6.noarch.rpm but just to be sure...

Yes.
nethserver-firewall-base-2.6.3-1.4.gae44624.ns6.noarch