I have two ISPs, both providing a T1 with public IPs. I also have two LAN
interfaces, one for our corporate LAN and the other serving wifi with just
Internet access. Corporate LAN should be routed out ISP A and wifi should be
routed out ISP B. I have two dual port cards in the fw that I'm using with
Shorewall.

eth0 = wifi
eth1 = LAN
eth2 = ISP B
eth3 = ISP A

Internet connectivity is working fine for the LAN. I can also get to the fw
from either the LAN or wifi zones without any problems. However, I can't
access the Internet from the wifi zone. Any suggestions? My policy file
looks like this:

#SOURCE         DEST            POLICY          LOG             LIMIT:BURST
#                                               LEVEL
lan             isp-a           ACCEPT
lan             fw              ACCEPT          info

isp-b           fw              ACCEPT          info

wifi             isp-b           ACCEPT
wifi             fw              ACCEPT          info
wifi             all             DROP            info

isp-a           fw              ACCEPT          info
isp-a           all             DROP            info

fw              isp-b           ACCEPT          info
fw              wifi            ACCEPT

all             all             REJECT          info
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to