Chakravarthy Girda wrote:
> Hi,
>    Shorewall version -4.0.12-2 (EL5 rpm version)
>    OS : Centos 5.2
> 
>        I have shorewall successfully running on Linux with multi ISP. 
> Trying to make services such as "rsync, ftp" go through my secondary 
> ISP. For which I did the following
> 
>    eth0 : Internal LAN
>    eth4 : DSL  (Second ISP)  => x.x
>    eth5 : T1   (First ISP)   => y.y
> 
> 
> Created the following entries in /etc/shorewall/masq
> 
> #INTERFACE    SOURCE          ADDRESS           PROTO
> eth4          eth0            x.x      tcp     20,21,873
> eth4          eth0            x.x      udp     20,21,873
> eth5          x.x           y.y
> eth4          y.y           x.x
> eth5          eth0            y.y
> eth4          eth0            x.x
> 
> 
>    But still my ftp and rsync follow my first default route. Which is my 
> T1. What else I need to do to force this connections only use my 
> secondary ISP.

From http://www.shorewall.net/MultiISP.html (the 'Warning' is even in
bold font!):

Warning

Entries in /etc/shorewall/masq have no effect on which ISP a particular
connection will be sent through. That is rather the purpose of entries
in /etc/shorewall/tcrules or /etc/shorewall/route_rules.

-Tom
-- 
Tom Eastep    \ The ultimate result of shielding men from the effects of
Shoreline,     \ folly is to fill the world with fools.
Washington, USA \                                     -- Herbert Spencer
------------------------------------------------------------------------
http://www.shorewall.net

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to