On 5/7/11 8:48 PM, Tom Eastep wrote: > On 5/7/11 8:22 PM, Tom Eastep wrote: > > I can actually answer that myself. I did an experiment with a > configuration similar to yours and produced the same failure. I was able > to work around the problem by adding a host route to 95.223.244.1 *in > the main* table: > > ip route add 95.233.244.1 src 88.153.50.70 dev eth1 > > The DHCP client should have added that route but apparently did not (or > it was deleted somehow). Given that your configuration has worked in the > past, the route must have been there until recently. > > Finally, the Shorewall-generated routing rules in 4.4.19.1 are the same > as those generated by 4.4.11.6.
Attached is a patch to /usr/share/shorewall/Shorewall/Providers.pm that should restore the missing route. Please let me know if it solves your problem. Thanks, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Providers.pm
b/Shorewall/Perl/Shorewall/Providers.pm
index 759c5f7..aa7086f 100644
--- a/Shorewall/Perl/Shorewall/Providers.pm
+++ b/Shorewall/Perl/Shorewall/Providers.pm
@@ -466,6 +466,7 @@ sub add_a_provider( ) {
if ( $gateway ) {
$address = get_interface_address $interface unless $address;
+ emit "run_ip route replace $gateway src $address dev $physical
${mtu}$realm";
emit "run_ip route replace $gateway src $address dev $physical
${mtu}table $number $realm";
emit "run_ip route add default via $gateway src $address dev $physical
${mtu}table $number $realm";
}
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
