sounds like you need ACCEPT+ rules in your rules file.

Jayme Sanches wrote:
> Hi,
> 
> I have a centos 5.3 with shorewall 4.2.10 and transparent 
> squid...(REDIRECT loc    3128 tcp 80     -       !192.168.1.254)
> 
> It's working fine with 2 NIC, eth0 - net and eth1 - loc
> 
> Now I need configure other ISP only for access the system in datacenter 
> - ip 200.XXX.XXX.240 (HTTP and HTTPS)...
> Others connections should continue as before...
> I installed other NIC - eth2 and follow the example on 
> http://www.shorewall.net/MultiISP.html, but I can't make it work...
> 
> my changed files:
> 
> /etc/shorewall/providers:
> #NAME           NUMBER  MARK    DUPLICATE       INTERFACE                
> GATEWAY         OPTIONS         COPY
> SPEEDSTREAM    1       1       main            eth0            
> 192.168.254.254    track,balance   eth1
> DLINK                    2       2       main            eth2            
> 10.1.1.1                track,balance   eth1
> 
> /etc/shorewall/interfaces:
> #ZONE   INTERFACE       BROADCAST       OPTIONS
> net     eth0            detect          
> dhcp,tcpflags,nosmurfs,routefilter,logmartians
> loc     eth1            detect          
> tcpflags,nosmurfs,routefilter,logmartians
> net     eth2            detect
> 
> /etc/shorewall/masq:
> #INTERFACE              SOURCE          ADDRESS         PROTO   PORT(S) 
> IPSEC   MARK
> eth0                   0.0.0.0/0 <http://0.0.0.0/0>       192.168.254.3
> eth2                   0.0.0.0/0 <http://0.0.0.0/0>       10.1.1.3
> #LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE
> 
> /etc/shorewall/tcrules:
> #MARK   SOURCE          DEST            PROTO   DEST    SOURCE  USER    
> TEST    LENGTH  TOS   CONNBYTES         HELPER
> #                                               PORT(S) PORT(S)
> 2:P    eth1    200.XXX.XXX.240  tcp     80
> #LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
> 
> Is it correct? There's others files to configure?
> Thank's
> Jayme.
> |
> |
> 
> 
> ------------------------------------------------------------------------
> 
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
> trial. Simplify your report design, integration and deployment - and focus on 
> what you do best, core application coding. Discover what's new with 
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to