LEAF shorewall NAT one to one

增加 /etc/shorewall/nat
192.168.10.42   eth0            192.168.201.1   no              no

增加 /etc/shorewall/rules
ACCEPT:NFLOG(4) net     dmz:192.168.201.1       tcp     22      -       192.168.10.42
ACCEPT:NFLOG(4) net     dmz:192.168.201.1       tcp     80      -       192.168.10.42

修改 /etc/shorewall/shorewall.conf 
ADD_IP_ALIASES=Yes