On 03/14/2012 11:30 AM, Ed W wrote:

> Basically create a situation that marks based on where the connection 
> comes from, rather than the port?  So if the connection comes *in* via 
> ISP1 for https, then mark it up to have replies go out the same way.  If 
> it's a new connection *out* then default the mark to 2 (or whatever)

The 'track' provider option does this automatically.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to