Tom Eastep wrote:

Tom Eastep wrote:
Charles Steinkuehler wrote:


Are you using the /etc/shorewall/masq file to try and *ASSIGN* the extra IP addresses? With your setup, I'd simply assign all IP's in your /etc/network/interfaces file (add entries for eth0:0, eth0:1, etc., along with the entry for eth0).


With the masq entry you list above, you'll be round-robining through source IP's for outbound traffic, which I doubt is what you really want.


Good catch -- I haven't a clue what Shorewall would do with that masq file entry and ADD_SNAT_ALIASES=Yes.



Hmmm -- I'm smarter than I thought :-)


...
Adding IP Addresses...
    IP Address 206.124.146.178 added to interface eth0 with label eth0:0
    IP Address 206.124.146.180 added to interface eth0 with label eth0:1
    IP Address 206.124.146.179 added to interface eth0 with label eth0:2
    IP Address 176.16.1.1 added to interface eth3 with label eth3:0
    IP Address 176.16.1.2 added to interface eth3 with label eth3:1
    IP Address 176.16.1.3 added to interface eth3 with label eth3:2
    IP Address 176.16.1.4 added to interface eth3 with label eth3:3
    IP Address 176.16.1.5 added to interface eth3 with label eth3:4
    IP Address 176.16.1.6 added to interface eth3 with label eth3:5
    IP Address 176.16.1.7 added to interface eth3 with label eth3:6
Processing /etc/shorewall/start ...
Shorewall Restarted
gateway:/etc/test#

So it assigns the addresses to sequential "aliases".

...but do any of your alias IP's overlap the main IP for the interface? I think the setup Craig was commenting likely has overlapping IP's (kind of hard to tell, though, since there's not exactly complete debugging info).


Regardless, if I'm reading the docs correctly, having multiple IP's after a masq entry will round-robin through all the IP's listed, which seems like a pretty wierd way to setup an external link.

--
Charles Steinkuehler
[EMAIL PROTECTED]


------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to