On Thu, 2011-09-01 at 12:27 -0400, Luis Candia wrote:
> Please I need help with the next error.
> 
> 
> I'm trying to implement a LAN with two ISP to get acces to Internet,
> load balacing and failover in case of any isp fails.
> 
> 
> This is the result of:
> 
> 
> #shorewall -vv start
> 
> 
> Compiling...

> Processing /etc/shorewall/start ...
> Processing /etc/shorewall/started ...
> done.

That is the end of 'start' and your firewall is started.

> eth0 is Down!
> eth1 is Down!

Who is generating those messages? It isn't Shorewall

> Restarting Shorewall....
> Initializing...
> Processing /etc/shorewall/init ...
> Processing /etc/shorewall/tcclear ...
> Setting up Route Filtering...
> Setting up Martian Logging...
> Setting up Proxy ARP...
> Adding Providers...
> Setting up Traffic Control...
> Preparing iptables-restore input...
> Running /sbin/iptables-restore...
> IPv4 Forwarding Enabled
> Processing /etc/shorewall/start ...
> Processing /etc/shorewall/started ...
> done.
> 200.67.110.56/29 dev eth0  proto kernel  scope link  src
> 200.67.110.59 
> 192.168.1.0/24 dev eth2  proto kernel  scope link  src 192.168.1.10 
> 190.160.50.0/24 dev eth1  proto kernel  scope link  src 190.160.50.54 
> 169.254.0.0/16 dev eth2  scope link 
> 
> 
> I'm using cwpin script to detect failover, just after I included the
> script, I get the next error

> #
> WARNING: Interface eth1 is nbo usable -- Provider ISP1 (1) no Added
> WARNING: Interface eth 0 is not usable -- Provider ISP2 (2) no Added
> WARNING. No Default route added (all 'balance' providers are down)

cwpin seems to be marking them as down and your 'isusable' extension
script is seeing that during the restart. This doesn't look like a
Shorewall issue.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
Special Offer -- Download ArcSight Logger for FREE!
Finally, a world-class log management solution at an even better 
price-free! And you'll get a free "Love Thy Logs" t-shirt when you
download Logger. Secure your free ArcSight Logger TODAY!
http://p.sf.net/sfu/arcsisghtdev2dev
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to