[Shorewall-users] Natting

2012-02-16 Thread Jan van der Vyver
Hi I have 2 routers connected to clients. On both the clients they use 10.0.X.X ips. We use 192.168.1.X in the DMZ. So I have the linux FW in our DMZ (192.168.1.1) and client1 router (192.168.1.10 internal and 10.0.X.X) and client2 router (192.168.1.20 internal and 10.0.X.X) My

[Shorewall-users] Forcing a source thru one provider

2012-02-16 Thread Alessandro Faglia
Dear list, my box is a Debian Lenny (4.0) with the stock Shorewall (3.2.6-2). I cannot upgrade right now so please don't tell me first upgrade! :) I managed to have Muliple-ISP working, and I'm driving web traffic (HTTP and HTTPS) thru one provider and mail traffic (GMail IMAPS/SMTPS) to the

Re: [Shorewall-users] Natting

2012-02-16 Thread Tom Eastep
On 02/16/2012 12:50 AM, Jan van der Vyver wrote: I have 2 routers connected to clients. On both the clients they use 10.0.X.X ips. We use 192.168.1.X in the DMZ. So I have the linux FW in our DMZ (192.168.1.1) and client1 router (192.168.1.10 internal and 10.0.X.X) and client2 router

Re: [Shorewall-users] Forcing a source thru one provider

2012-02-16 Thread Tom Eastep
On 02/16/2012 12:45 AM, Alessandro Faglia wrote: Dear list, my box is a Debian Lenny (4.0) with the stock Shorewall (3.2.6-2). I cannot upgrade right now so please don't tell me first upgrade! :) I managed to have Muliple-ISP working, and I'm driving web traffic (HTTP and HTTPS) thru one

Re: [Shorewall-users] [Shorewall-announce] Shorewall 4.5.0

2012-02-16 Thread Mr Dash Four
It's based on the approach that I tried to explain to you the last time the topic came up. Glad you like it. As I already said - congratulations! [ -n $DESTDIR ] || DESTDIR=$PREFIX #! so, DESTDIR is always set, no matter what #! [...] It is only set if you set it explicitly or

Re: [Shorewall-users] Forcing a source thru one provider

2012-02-16 Thread Alessandro Faglia
On Thu, Feb 16, 2012 at 4:32 PM, Tom Eastep teas...@shorewall.net wrote: Put the rule for your IP address *last*; the tcrules file is 'last match wins'. I found this, and I had also to exclude the host from a REDIRECT for the Squid transparent proxy which was preventing the web traffic to