You need to update to shorewall 5.0.2 and use the persistent option of shorewall-providers.
On Mon, Jul 4, 2016 at 7:38 PM, Jesús Domínguez <[email protected]> wrote: > Hi everybody, > > I am using shorewall 4.5.5.3-3 and lsm-1.0.5. thanks to this guide: > http://www.shorewall.net/MultiISP.html#idp47535760. > > It works properly if I use the Lan IPs of the routers (192.168.2.1) but I > need to detect a failure past the router (Ej: 8.8.8.8). Lsm-shorewall > detects the failure of a provider but never detect when it is available > again. > > I think this is logical becouse the system do not know the route to this > external ip becouse the provider was no availble and is impossible to do a > ping to an external ip. (All routing table have changed when the provider is > down). > > I think I have to add a route but I don' know how to do it, where to add > properly. > > I have attached my shorewall dump and providers and interfaces > configuration: > Hi everybody, > > I am using shorewall 4.5.5.3-3 and lsm-1.0.5. thanks to this guide: > http://www.shorewall.net/MultiISP.html#idp47535760. > > It works properly if I use the Lan IPs of the routers (192.168.2.1) but I > need to detect a failure past the router (Ej: 8.8.8.8). Lsm-shorewall > detects the failure of a provider but never detect when it is available > again. > > I think this is logical becouse the system do not know the route to this > external ip becouse the provider was no availble and is impossible to do a > ping to an external ip. (All routing table have changed when the provider is > down). > > I think I have to add a route but I don' know how to do it, where to add > properly. > > Thank you very much for your help and I hope I have explained correctly. My > english need to improve a lot. > I have attached my shorewall dump and providers and interface configuration > > /etc/shorewall/providers > #NAME NUMBER MARK DUPLICATE INTERFACE GATEWAY > OPTIONS COPY > MOVISTAR 1 1 - eth3 192.168.2.1 > track,balance - > MASMOVIL 2 2 - eth1 192.168.1.1 > track,balance - > > /etc/shorewall/interfaces > #ZONE INTERFACE BROADCAST OPTIONS > net eth1 detect optional,sourceroute=0,routefilter=0 > ##Movistar > net eth3 detect optional,sourceroute=0,routefilter=0 > dmz eth0 detect logmartians > lan eth2 detect dhcp,logmartians > wif vlan1002 detect dhcp,logmartians > gue vlan1004 detect dhcp,logmartians > loc vlan1006 detect dhcp,logmartians > OVPN tun+ detect routeback > > ------------------------------------------------------------------------------ > Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San > Francisco, CA to explore cutting-edge tech and listen to tech luminaries > present their vision of the future. This family event has something for > everyone, including kids. Get more information and register today. > http://sdm.link/attshape > _______________________________________________ > Shorewall-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/shorewall-users > -- Ciao, Filippo ------------------------------------------------------------------------------ Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today. http://sdm.link/attshape _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
