On 05/11/2012 11:52 AM, John McMonagle wrote: > On Thursday, May 10, 2012 02:36:56 pm Tom Eastep wrote: >> On 05/10/2012 12:09 PM, John McMonagle wrote: >>> I upgraded our 2 sites with 2 isps to shorewall 4.5.2.4. >>> >>> I'm going to try lsm. >>> >>> If the isp is static do I still need to set as optional in the interfaces >>> file? >> >> Sure -- just because it has a static IP address doesn't mean that it's >> going to be usable 100% of the time. >> >>> If rules are set to force traffic to a specific provider and that >>> provider is down, will that traffic go to another provider? >> >> Existing connections out of the down provider will usually die. New >> connections will be sent through the remaining provider. >> >> -Tom > Thanks Tom > > I had short time yesterday to test. > Attached is tar of /etc/shorewall and /etc/lsm > > Showed some signs of life :-) > > I expected issues so put the new stuff in /etc/shorewall/lsm > started as shorewall /etc/shorewall/lsm > > I pulled ethernet to cable modem TImeWarner eth2 provider ISP2. > Ran > watch ip route show table balance > and > watch cat /var/lib/shorewall/eth2.status > in windows > > On pulling: > balance table changed and other ISP2 routes went away. > eth2.status did not change. > Got down email from lsm. > > On plugging back in: > routing tables did not change. > eth2.status did not change. > Got up email from lsm. > > Obviously missed something :-( > > Do you see anything or have suggestions on how to debug? >
- Set STARTUP_LOG=/var/log/shorewall-init.log - Set LOG_VERBOSITY=1 Look at the log while testing to see what is going on. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
