On Wed, May 27, 2009 at 05:31:14PM -0700, Tom Eastep wrote:
> Marcos Dione wrote:
> > NOTE: this mail started as a help call, but I've been wrinting it
> > through several days, and several tests that lead more to an
> > investigation that to an actual question. I think it's somewhat usefull,
> > specially if thewre are comments on why the different cases didn't work
> > as spected. take in account that I didn't try to fix its redaction.
> >
> > I have two ISPs, one reliable but restrictive and one unreliable but
> > open. I also have a internal network to which I should offer best effort
> > service. let me explain.
> >
> > the reliable network, let's call it UNC, only offers access to
> > http/s and ssh. the unreliable one. Arnet, lets me access any port, but
> > the BW is much smaller and often the link goes down.
> >
> > so what I want is to route all traffic, including the firewall
> > generated, through Arnet (even if it's unreliable), except http/s and
> > ssh, which goes though UNC, including traffic to the UNC network itself.
> >
> > my current configuration is:
> >
> > # shorewall.conf
>
> Marcos,
>
> I'm sorry to hear that you are having problems with Shorewall Multi-ISP
> support and that I may have contributed to the problem. But it is
> virtually impossible for me to help people who sent snippets of their
> configuration files that then ask "Why doesn't it work?".
I knew this is the situation. I mentioned your suggestions to
express that I was lost and that didn't knew exactly what I was doing.
> That is why the Support Guidelines
> (http://www.shorewall.net/support.htm#Guidelines) ask that when you have
> any kind of connection problem that you send the output of 'shorewall
> dump' collected as described rather than sending configuration files.
I didn't attach them, but I put then in the URL I sent. I didn't
want to flood the list with several dumps.
--
(Not so) Random fortune:
When I first started working with sendmail, I was convinced that the cf file had
been created by someone bashing their head on the keyboard. After a week, I
realised this was, indeed, almost certainly the case.
-- Unknown
------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, &
iPhoneDevCamp as they present alongside digital heavyweights like Barbarian
Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
