On Aug 21, 2011, at 9:06 AM, Ed W wrote: > On 21/08/2011 16:50, Tom Eastep wrote: >> On Aug 21, 2011, at 8:23 AM, Ed W wrote: >> >>> Sorry to ask what is probably a basic question, but I'm struggling to >>> get my routing to do anything sensible. I have simplified by config to >>> the bare minimum to experiment. >>> >>> Roughly speaking my problem is that I have two interfaces (eth0 and >>> ppp1) and bringing each up individually passes traffic as expected. >>> Setting both up prefers traffic through eth0, likely because of the >>> higher metric. Attempting to set any TC mark to direct traffic through >>> ppp1 and I get no reply packets, netfilter logging suggests it's still >>> trying to pass through eth0 also? >>> >> Please capture the output of 'shorewall dump' as described at >> http://www.shorewall.net/support.htm#Guidelines and forward it as an >> attachment. >> > > Sorry about that: > > Some additional background that isn't shown in the dump. Kernel > 2.6.38.4, but with grsec patches (and a couple of other thing such as > aufs). iproute2 installed, but using busybox/uclibc. Just mentioning > for completeness? I can't quickly find what kernel config options are > needed for policy routing - can someone confirm what to check? > > > > $ shorewall dump > Shorewall 4.4.22.3 Dump at localhost - Sun Aug 21 16:01:01 UTC 2011 > > Counters reset Sun Aug 21 15:14:58 UTC 2011 > > Chain INPUT (policy DROP 0 packets, 0 bytes) > pkts bytes target prot opt in out source > destination > 93 6301 accountin all -- * * 0.0.0.0/0 > 0.0.0.0/0 > 53 3205 dynamic all -- * * 0.0.0.0/0 >
Ed -- I specifically asked that the dump be forwarded as an attachment. Placing it inline has caused your mailer to fold it until it is unreadable. Please resend. If you mailer unconditionally inlines text attachments, then please compress it first. Thanks, -Tom Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2 _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
