> > Okay -- so what you really want is that the route_rules for a provider > should be omitted if the provider is not available. That makes sense > (although it is not what you originally asked for). > Yes, route_rules for a provider should be omitted if the provider is not available.
> > This doesn't halt the shorewall. But, I am manually adding more table > > entries in the rt_table, which will be erased by shorewall in case if I > > start/restart shorewall when /etc in mounted read-write. > > Okay -- In Shorewall 4.0.3, Shorewall-perl will support a KEEP_RT_TABLES > option. Thanks. > > > I have dual link to a particular location with static IP addresses > > configured. I am detecting link failures by some custom method. I will be > > starting/restarting shorewall when ever I detect link failures. The > > plugin will provide information whether a particular link is up or down. > > I know that LARTC dead gateway detection will help here but this feature > > in shorewall simplifies complexity without recompiling the kernel. > > Then please simply define your own version of is_interface_usable() in your > /etc/shorewall/init file. We don't need to hack up Shorewall to accommodate > this requirement. > I am using shorewall 3.4.4 at the moment. Will this technique future compatible with shorewall perl (4.0+)? My concern is I may end up in trouble if shorewall started using different function (other than is_interface_usable) to detect interface status in future versions. I tested with my own version of is_interface_usable and which works for the current version of shorewall I am using. (3.4.4). I feel the plugin approach will be very helpful for multiple wan links with static IPs. A simple daemon can ping the gateway and start/restart shorewall when the link goes up/down. > -Tom Thanks, Hebbar ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
