ridgerun@gateway:~$ cat /etc/shorewall/rules
#ACTION SOURCE      DEST             PROTO   DEST        SOURCE     ORIGINAL
#                                            PORT        PORT(S)    DEST
DNAT    net:eth2    cr:10.251.101.2  tcp     ldaps
# OpenVPN
ACCEPT  net:eth2    $FW              tcp     1194
ACCEPT  net:eth2    $FW              tcp     http
# GRE tunnels
ACCEPT  net         $FW		     47
# SSH
#ACCEPT  net:eth1    $FW              tcp     ssh
# IPV6 tunels
ACCEPT  net:66.220.2.74 $FW          icmpridgerun@gateway:~$