Shorewall file
/etc/shorewall/routes
This file was added in Shorewall 4.4.15 and is used to define routes to be added to provider routing tables.
The columns in the file are as follows.
PROVIDER
The name or number of a provider defined in \m[blue]shorewall-providers\m[]\s-2\u[1]\d\s+2 (5). Beginning with Shorewall 4.5.14, you may also enter main in this column to add routes to the main routing table.
DEST
Destination host address or network address.
GATEWAY (Optional)
If specified, gives the IP address of the gateway to the DEST.
Beginning with Shorewall 4.5.14, you may specify blackhole in this column to create a blackhole route.
Beginning with Shorewall 4.5.15, you may specify prohibit or unreachable in this column to create a prohibit or unreachable route respectively.
DEVICE (Optional)
Specifies the device route. If neither DEVICE nor GATEWAY is given, then the INTERFACE specified for the PROVIDER in \m[blue]shorewall-providers\m[]\s-2\u[1]\d\s+2 (5). This column must be omitted if blackhole, prohibit or unreachable is specified in the GATEWAY column.
/etc/shorewall/routes
\m[blue]http://www.shorewall.net/configuration_file_basics.htm#Pairs\m[]\s-2\u[2]\d\s+2
shorewall(8), shorewall-accounting(5), shorewall-actions(5), shorewall-blacklist(5), shorewall-hosts(5), shorewall_interfaces(5), shorewall-ipsets(5), shorewall-maclist(5), shorewall-masq(5), shorewall-nat(5), shorewall-netmap(5), shorewall-params(5), shorewall-policy(5), shorewall-providers(5), shorewall-proxyarp(5), shorewall-rtrules(5), shorewall-routestopped(5), shorewall-rules(5), shorewall.conf(5), shorewall-secmarks(5), shorewall-tcclasses(5), shorewall-tcdevices(5), shorewall-mangle(5), shorewall-tos(5), shorewall-tunnels(5), shorewall-zones(5)
shorewall-providers
http://www.shorewall.net/manpages/shorewall-providers.html
http://www.shorewall.net/configuration_file_basics.htm#Pairs
http://www.shorewall.net/configuration_file_basics.htm#Pairs