Hi Tom! On 24/04/2014 04:29, Tom Eastep wrote: > On 4/23/2014 11:52 AM, Angela Williams wrote: >> Hi All! >> Only I can find these weird problems! >> >> I have pretty much duplicated another customers setup with 3 isp's. Only >> difference is is the new customer on;y has 2 isp's >> I have compared all the config files in /etc/shorewall and other than >> the 3 isp to 2 isp changes it all looks good. >> >> The problem is only really with the Fibre isp link. The Adsl line is >> fine. it looks like a routing issue. From home on the internet I can >> only ssh in via the adsl ip address and not via the fire ip. The same >> applies from my Icinga site, I can make an nrpe connection via adsl but >> not via fibre. From the server itself my named server does not seem to >> work either. If I force a default route ot via the adsl named works >> fine! Shutdown shorewall and the problems go away! Not the righr way to >> work! >> >> I have attached the required dump as a gzip tente-dump.gz > > For some reason, there is a default route in the 'main' table; that > route shouldn't be there.
I should have taken it out! But then as I said I would do some digging with dig and tcpdump! That led me to the actual problem! A stupid little Mikrotik box that currently terminates the fibre! It seems that it blocks port 53. I just used tcrules to send dns traffic out on the adsl line! Problem solved! It does help when trying to describe the problem to a support list! One then gets a better handle on things! Thanks for reading my ramblings but it really helps! It also helps to listen to the list as well! Thanks once again for all your help over the years! It is greatly appreciated! Ang -- Angela Williams angierfw at gmail dot com Linux/Networking Hacker Blog http://angierfw.wordpress.com Smile! Yeshua Loves You! ------------------------------------------------------------------------------ Start Your Social Network Today - Download eXo Platform Build your Enterprise Intranet with eXo Platform Software Java Based Open Source Intranet - Social, Extensible, Cloud Ready Get Started Now And Turn Your Intranet Into A Collaboration Platform http://p.sf.net/sfu/ExoPlatform _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
