In your masq file, you need:

 

eth0  10.1.0.0/20

eth3  192.168.16.0/20

 

Tom

 <mailto:[email protected]> [email protected]

http://www.shorewall.org

 

From: Orlandinei Vujanski [mailto:[email protected]] 
Sent: Saturday, March 15, 2014 10:23 AM
To: Shorewall Users
Subject: Re: [Shorewall-users] 2 ISP + 2 LAN

 

Tom, can you help me? 

My network "eth1" 10.1.0.0/20 <http://10.1.0.0/20>  has to leave the default
gateway "eth0" 177.135.78.241. 

My network "eth2" 192.168.16.0/20 <http://192.168.16.0/20>  have to leave
the default gateway "eth3" 10.0.0.1. 

 

Follow my setup: 

 

/etc/shorewall/masq:

eth0    eth1

 

/etc/shorewall/tcrules:

1:P     192.168.16.0/20 <http://192.168.16.0/20> 

 

/etc/shorewall/providers:

radio  1       1       main            eth3         10.0.0.1           track
-

 

But this not working. 

Tudol is leaving the default gateway 177.135.78.241. 

But I want to get off the 192.168.16.0/20 <http://192.168.16.0/20>  network
10.0.0.1 default gateway. 

 

How do I please!

 

 

 

 

2014-02-24 13:04 GMT-03:00 Tom Eastep <[email protected]
<mailto:[email protected]> >:

On 2/24/2014 7:29 AM, Orlandinei Vujanski wrote:

> 2014-02-23 12:52 GMT-03:00 Tom Eastep <[email protected]
<mailto:[email protected]> 

> <mailto:[email protected] <mailto:[email protected]> >>:

>
>     On 2/23/2014 6:44 AM, Orlandinei Vujanski wrote:
>     > Tom,
>     > Good afternoon, all right?
>     > Can you help me?
>     >
>     > I have 2 ISP link on my firewall, with the gateway:
>     > eth0: 177.135.78.1
>     > eth1: 10.0.0.1
>     >
>     > I also have 2 local network, being:

>     > eth2: 192.168.16.0/24 <http://192.168.16.0/24>
<http://192.168.16.0/24>
>     > eth3: 10.1.0.0/20 <http://10.1.0.0/20>  <http://10.1.0.0/20>

>     >
>     > How do I do so that the network 192.168.16.0/24
<http://192.168.16.0/24> 

>     <http://192.168.16.0/24>

>     > 177.135.78.1 and exit through the Internet gateway at 10.0.0.1

>     > 10.1.0.0/20 <http://10.1.0.0/20>  <http://10.1.0.0/20> skirt?
>     >
>     > Thank you
>
>     In /etc/shorewall/tcrules:
>
>             m:P     192.168.16.0/24 <http://192.168.16.0/24>
<http://192.168.16.0/24>

>
>     Where 'm' is the mark for the provider with gateway 10.0.0.1.

> Tom, good morning.
> From what I understand, I also need to configure the correct file
> /etc/shorewall/providers?
> Then I can work with virtual interface eth0:1 or must be physically?
>
>

You do not need to configure eth0 in the providers file. I assume that
you have already configured eth2 and eth3 in /etc/shorewall/providers?


-Tom

--
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________


----------------------------------------------------------------------------
--
Flow-based real-time traffic analytics software. Cisco certified tool.
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
Customize your own dashboards, set traffic alerts and generate reports.
Network behavioral analysis & security monitoring. All-in-one tool.
http://pubads.g.doubleclick.net/gampad/clk?id=126839071
<http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktr
k> &iu=/4140/ostg.clktrk
_______________________________________________
Shorewall-users mailing list
[email protected]
<mailto:[email protected]> 
https://lists.sourceforge.net/lists/listinfo/shorewall-users

 

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to