Hi,

I have the following set up:

LAN --> Gateway 1 --> ISP1
LAN --> Gateway 2 --> ISP2

Gateway2 is running Shorewall. Both gateways are doing SNAT.

I have a server on the public side of Gateway1 (i.e. on a global IP
belonging to ISP1). People using Gateway2 currently have to go
upstream to ISP2, through the public internet and back in through ISP1
to reach the said server. Obviously, this is a waste of time and
bandwidth.

I have added a static route on gateway 2 like so:

/sbin/route add -host ip.of.server.on.isp1 gw ip.of.gateway.2

>From gateway2 itself I am able to ping my server. However, I am unable
to ping server from any desktop on the LAN which is using Gateway2 as
its gateway. I suspect this is due to some rule in Shorewall. Any
clues as to how I can wrangle shorewall into allowing this packet?

Thanks.

S.
-- 
"This is everybody's fault but mine!" -- Homer J. Simpson


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=click
_______________________________________________
linux-india-help mailing list
linux-india-help@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to