-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 11/09/2016 08:29 AM, Tom Eastep wrote:

> 
> You *always* need SNAT on a router that can direct traffic to one 
> provider or another.
> 

Multi-hop routes are still not working quite correctly in
iproute2/kernel :-( They are adding multiple routes with all but the
last one specifying a metric. So multiple 'balance' or 'fallback'
providers still aren't working as expected in Shorewall6.

- -Tom
- -- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org
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=Q3Ca
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to