Hi,

I'm trying to set up a multi ISP configuration.
I can make it work without shorewall, except for incoming connections :
i want to be able to connect to any oof the internet interfaces from 
outside, I can not with ports forwarded on the local network : I am not 
always receiving an answer
I just want the same result as a multiWAN router that does load balancing.

I discovered shorewall and the "MultiISP" configuration that seemed to 
answer my problem.
I did set all files but the providers one, everything works then.
But when I fill the providers file, nothing works anymore : outgoing 
connections are no more working, neither does incoming ones.

Please help.

 

Here are the commands you request
(just so you know : eth0,eth1,eth2 are internet connections and eth4 is 
the only used local one) :

#/sbin/shorewall version
4.0.13

#ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
qlen 100
    link/ether 00:15:17:7a:6a:bc brd ff:ff:ff:ff:ff:ff
    inet 88.162.31.82/24 brd 88.162.31.255 scope global eth0
    inet6 fe80::215:17ff:fe7a:6abc/64 scope link
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
qlen 100
    link/ether 00:15:17:7a:6a:bd brd ff:ff:ff:ff:ff:ff
    inet 83.142.149.102/30 brd 83.142.149.103 scope global eth1
    inet6 fe80::215:17ff:fe7a:6abd/64 scope link
       valid_lft forever preferred_lft forever
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
qlen 1000
    link/ether 00:15:17:7a:6a:50 brd ff:ff:ff:ff:ff:ff
    inet 192.168.2.1/24 brd 192.168.2.255 scope global eth2
    inet6 fe80::215:17ff:fe7a:6a50/64 scope link
       valid_lft forever preferred_lft forever
5: eth3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000
    link/ether 00:15:17:7a:6a:51 brd ff:ff:ff:ff:ff:ff
6: eth4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
qlen 1000
    link/ether 00:1e:4f:3e:29:8e brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.200/24 brd 192.168.1.255 scope global eth4
    inet6 fe80::21e:4fff:fe3e:298e/64 scope link
       valid_lft forever preferred_lft forever
7: eth5: <BROADCAST,MULTICAST> mtu 1500 qdisc noop qlen 1000
    link/ether 00:1e:4f:3e:29:8f brd ff:ff:ff:ff:ff:ff
8: teql0: <NOARP> mtu 1500 qdisc noop qlen 100
    link/void

#ip route show
83.142.149.100/30 dev eth1  proto kernel  scope link  src 83.142.149.102
88.162.31.0/24 dev eth0  proto kernel  scope link  src 88.162.31.82
192.168.2.0/24 dev eth2  proto kernel  scope link  src 192.168.2.1
192.168.1.0/24 dev eth4  proto kernel  scope link  src 192.168.1.200
default
        nexthop via 88.162.31.254  dev eth0 weight 1
        nexthop via 83.142.149.101  dev eth1 weight 1
        nexthop via 192.168.2.200  dev eth2 weight 1


And here is my providers file :

#NAME  NUMBER  MARK    DUPLICATE       INTERFACE       GATEWAY         
OPTIONS         COPY
ISP1   200     1       main            eth0            88.162.31.254   
track,balance   eth4
ISP2   201     2       main            eth1            83.142.149.101  
track,balance   eth4
ISP3   202     3       main            eth2            192.168.2.200   
track,balance   eth4
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE


Thank you for your help


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to