On 19/08/2011 14:08, Tom Eastep wrote: > On Fri, 2011-08-19 at 13:39 +0100, Ed W wrote: >> Hi, I'm just trying to test my "multi-isp" setup and running into some >> teething problems (shorewall 4.4.22) >> >> Firstly, I wanted to do a quick test using a wired + wireless >> alternatives, but for convenience both devices are connecting to the >> same network (192.168.105.0/24). > > I recommend that you don't do that -- it will take much more time to > work around all of the pitfalls in that configuration than it will to > simply bring up the real configuration.
The problem is that I won't have control over the "real" configuration. It's an appliance that I am building and as far as possible I'm trying to build robust configurations that survive users doing unusual things It's entirely probable to meet a situation where I have say a satellite system sitting on 192.168.1.1/24 and a wifi connection to some internet cafe on 192.168.1.1/24. I want the user to agree (via web interface) that the wifi connection is the cheapest option and then force route everything via wlan1. I really need to get absolute control over my routing for this setup. Several of the network connections will have substantial costs and surprises aren't desirable (think $10-100/MB) I'm trying to prototype this using shorewall, but my thinking is, given: known set of interfaces at boot (eth0-3, wlan1-2, PPP0-5), I can setup my masquerading and firewalling once, then control routing using ipset entries to control TC rules. A daemon monitoring what interfaces are alive can then be used to dynamically adjust the routing table. Does this seem workable? Any shortcuts to get there? How much can I leverage shorewall to help. Can I make use of the routing rules added by the kernel? THanks for any ideas Ed W ------------------------------------------------------------------------------ Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
