SHOREWALL-PROXYARP(5)

💖 SHOREWALL-PROXYARP 💖

okay bestie, welcome to the proxyarp page from the Shorewall configuration files manual, section 5. yes we're reading a manpage for fun now, that's just the era we're in, and honestly? iconic. 🎀

---

✨ NAME ✨

proxyarp — the Shorewall Proxy ARP file, fr fr 💅

---

🌸 SYNOPSIS 🌸

/etc/shorewall/proxyarp

---

🦋 DESCRIPTION 🦋

IPv4 only. no IPv6 here, she said what she said. 💀

This file is literally where you define Proxy ARP. You get one entry per IP address you wanna proxy. One. Entry. Per. Address. That's the whole vibe. ✨

The columns in the file go like this, bestie, in order:

• ADDRESS — address — this is just the IP Address. that's it. that's the column. 🫶
• INTERFACE — interface — (Optional as of Shorewall 4.4.16, yes she got an upgrade 💅) this is the local interface where the system with the ip address from ADDRESS is connected. You only actually need this column when HAVEROUTE is set to No (or no), or when it's just left empty. lowkey conditional queen. 👑
• EXTERNAL — interface — the External Interface that gets used to access this system from the Internet. 🌈
• HAVEROUTE — [-|Yes|No] — so here's the tea: if there's already a route from the firewall to the host whose address you gave, you put Yes or yes in this column. If there isn't, you put no or No, or just leave the column empty, and Shorewall will add the route for you, bestie, she's got you. 🫶 BUT — if Shorewall adds the route, whether it sticks around depends on the value of the PERSISTENT column containing Yes. Otherwise? shorewall stop or shorewall clear will delete that route. no cap. 😭
• PERSISTENT — [-|Yes|No] — this one only matters if HAVEROUTE is No or no. If it is, then this column decides whether the route Shorewall added survives a shorewall stop or a shorewall clear. If this column contains Yes or yes, the route persists ✨. If the column is empty, or contains No or no, then the route gets deleted by shorewall stop or shorewall clear. it's giving permanence issues. 💀

---

🎀 EXAMPLE 🎀

Example 1:

So picture this: a host with IP 155.186.235.6 is connected to interface eth1, and we want hosts attached via eth0 to be able to reach it using that address. slay. 💖

#ADDRESS        INTERFACE       EXTERNAL
155.186.235.6   eth1            eth0

---

🍓 FILES 🍓

• /etc/shorewall/proxyarp

---

💜 SEE ALSO 💜

• https://shorewall.org/ProxyARP.htm[1]
• https://shorewall.org/configuration_file_basics.htm#Pairs[2]
• shorewall(8)

---

🧚 NOTES 🧚

1. https://shorewall.org/ProxyARP.htm https://shorewall.org/ProxyARP.htm
2. https://shorewall.org/configuration_file_basics.htm#Pairs https://shorewall.org/configuration_file_basics.htm#Pairs

---

and that's the whole page bestie, you ate that 💅✨ This one's from the Configuration Files crew, dated 09/24/2020, and it's filed under SHOREWALL-PROXYARP(5) — go forth and proxy those ARPs, main character. 👑🌸🦋