Dears,
I'm stuck with configuring Shorewall for dual ISP with dynamic IP. The main goal is to use ISP-1 for general traffic and ISP-0 for specific traffic like POP - SMTP - VPN I made a basic system which daesn't work refered "WORKNOT" _____________________ _____________________ ________ | | | | | | | Mail Server | | Shorewall |--------------| ISP-0 | | IP: 192.168.155.200 | | | |________| | DNS:192.168.155.250 |---------------| IP: 192.168.155.250 | ________ | GTW:192.168.155.250 | | |------ | | |_____________________| |_____________________| |-------| ISP-1 | |________| Traffic seems to be correctly routed but I have "Timeouts" on packets for POP & SMTP going through ISP-0 In the course to debug I connected this system to our actual Shorewall system to get one ISP from there and the second directely and it works, this system is refered as "WORKING" _____________________ _____________________ __________________ ________ | | | | | | | | | Mail Server | | Shorewall |--------------| Actual Shorewall |------------| ISP-0 | | IP: 192.168.155.200 | | | |__________________| |________| | DNS:192.168.155.250 |---------------| IP: 192.168.155.250 | ________ | GTW:192.168.155.250 | | |------ | | |_____________________| |_____________________| |-------| ISP-1 | |________| My issue consist in the fact that except changing some IP address parameters the setup of shorewall is identical between systems but gives different results. I wondered first if the problem is not coming from the "detect" parameter for gateway in "providers" and made a special script that updated providers to write the right value for both ISPs but didn't solve anything. I'm lost for now Looking forward to hearing from you soon. Best regards, Jean-Francois Bogaerts
Dump-worknot.txt.tar.gz
Description: Binary data
Dump-working.txt.tar.gz
Description: Binary data
------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
