Hi there, I've been using the multi-isp functions in shorewall for years, and recently updated my version of shorewall and the failover scripts I've been using have stopped working (swping). I've also tried to make FOOLSM work without any success. I've modified my old version of swping to use the firewall disable/enable methods vs. updating the status files. It's attached. But neither my hacked version of swping or FOOLSM seem to work.
Here seems to be my problem: Either can correctly detect a down internet
connection, but once it calls ${VARDIR}/firewall disable ${DEVICE} then no
more packets can be sent out via that internet connection so the script
can't successfully determine when the link is back.
# ping -I wlan0 8.8.8.8
PING 8.8.8.8 (8.8.8.8) from 192.168.128.11 wlan0: 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=56 time=92.1 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=56 time=62.1 ms
^C
--- 8.8.8.8 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1000ms
rtt min/avg/max/mdev = 62.106/77.106/92.106/15.000 ms
# /var/lib/shorewall/firewall disable wlan0
# ping -I wlan0 8.8.8.8
PING 8.8.8.8 (8.8.8.8) from 192.168.128.11 wlan0: 56(84) bytes of data.
>From 192.168.128.11 icmp_seq=1 Destination Host Unreachable
>From 192.168.128.11 icmp_seq=2 Destination Host Unreachable
>From 192.168.128.11 icmp_seq=3 Destination Host Unreachable
^C
--- 8.8.8.8 ping statistics ---
5 packets transmitted, 0 received, +3 errors, 100% packet loss, time 4016ms
pipe 3
#
It is possible this is because one of the links is an usb wifi dongle, and
that's breaking something. Its also possible something else in my configs
is breaking something?
I don't see any blocked messages in my logs.
Internet connections: wlan0 & eth3. I've attached shorewall dump and the
swping config I'm using.
Any ideas?
Thanks in advance,
-3ric Johanson
swping
Description: Binary data
shorewall_dump.txt.gz
Description: GNU Zip compressed data
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
