On Sat, 2007-02-10 at 13:31 -0800, Tom Eastep wrote: > > That's consistent with what we're seeing. > > The best way to work around this is to configure applications on the > firewall so that they use the local IP address that corresponds to the > interface that you want them to use.
See, this is all a red herring I think. I think the outgoing address and the return address and the interface they are coming back in on is all correct. I think the SNAT/masq'ing to ensure the correct source address is being set is working fine and as for the routing back given the source address I specify, that has to be working or the Internet would be really broken if it were not. The only problem at hand seems to be this martian detection/rp_filtering and which default route is currently the default in use (given load balancing). Unfortunately, nobody on the LARTC list has either confirmed or denied my supposition. b. -- My other computer is your Microsoft Windows server. Brian J. Murrell
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier. Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
