On 10/1/10 2:32 PM, Simon Buckner wrote:
> I did try installing the latest version of Ubuntu but that didn't
> work either. That didn't seem to support CONNMARK either. Is
> CONNMARK support the key?  If I install Ubuntu then recompile the
> kernel to support CONNMARK then should that work?  Is there anything
> else that would need to be supported to get this working?

Simon - it is poor Netiquette to respond to a Digest post and quote the
entire Digest. It's also annoying that you didn't change the Subject to
something meaningful for the problem you are posting about.

This is from a freshly-installed Ubuntu 10.4.1 Server:

r...@ubserver:~# shorewall show capabilities
Shorewall has detected the following iptables/netfilter capabilities:
   NAT: Available
   Packet Mangling: Available
   ...
   CONNMARK Target: Available
   Extended CONNMARK Target: Available
   Connmark Match: Available
   Extended Connmark Match: Available
   ...
   fwmark route mask: Available
   Mark in any table: Available
r...@ubserver:~#

Why do you believe that you lack COMMMARK support. CONNMARK support is a
requirement for 'track' providers and, in my view, multi-ISP doesn't
work too well without that capability.

But in reality, all you've told us so far is "It doesn't work" so we can
only guess at what the problem is. A Shorewall dump along with the
supporting information requested at http://www.shorewall.net/support.htm
would be a good start.

Thanks,
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to