On Wed, 2011-11-30 at 12:23 -0800, Lee Brown wrote:
> On Wed, Nov 30, 2011 at 10:47 AM, Tom Eastep <[email protected]>
> wrote:

> What exactly is your concern with connection tracking? Can't you
> simply disable the interface to ISP#1 when the limit is reached?
> 
> 
> The problem I find with that is once I bring the interface back up,
> traffic continues to ISP#2 when it should switch back to ISP#1.  I
> don't really know, but I suspect connection tracking is causing that
> to happen.

You do realize that active connections cannot be migrated from one ISP
to another, right?

When you bring up ISP#1, connections through ISP#2 will continue to use
that ISP. The only way to stop them is to disable ISP#2.

-Tom
--
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to