On 2/27/2015 8:08 AM, Brian J. Murrell wrote: > Hi, > > I know in Shorewall for IPv4 there are rules to ensure that the correct > source address is being used for each of the interfaces in a Multi-ISP > configuration. > > Does such a thing exist for IPv6? Maybe Shorewall is the wrong tool? > > I have a problem where my router seems to be using an address from a > different interface when sending ICMP6 packets out. To clarify, I have > two IPv6 providers with two different IP addresses for them on my end. > At some point on interface A, the (Linux, Shorewall) router will need to > send an ICMP6 "packet too big" packet to a remote. The problem is that > when it does this it is sending it from the IP address on interface B. > > Can I solve this with Shorewall6?
You can configure the appropriate rules in /etc/shorewall6/masq, provided that your Kernel and IPv6 tables support NAT. See the output of 'shorewall6 show capabilities'. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Dive into the World of Parallel Programming The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
