Brian J. Murrell wrote:

> 
> Part of the problem is the inflexibility of various players.  Everything
> that deals with routing assumes a single "main" routing table when in a
> more complex world that's not the case and there is no ability to step
> in and change that.  That's why shorewall's "hack"s to deal with it is
> used by the people who use it.
> 

My what you miss when your sleeping...

If your talking init scripts here, right? The issues I found with 
dealing with iproute2, is that the packages that deal with 
obtaining/creating an ip address only assume the main routing table 
should be used. While what we really want here, I think, is one table 
per ip, maybe one per net route with secondary ips using src. Much like 
what a table looks like with what shorewall generates without an entry 
in the copy column for a provider, just the ip specific routing.  Then 
the other issue becomes /etc/iproute2 data, what should the table names 
be? Tom's manipulation of rt_tables could be used to set the table's 
name based on the interface name, and the related route rule code use to 
create the routing rule.
Thus, to look up a route it would be: ip route ls table ppp0,
ip route ls table tun0, ip route ls table eth0 etc...

I'm I on track here or way off base?

To change the networking scripts would be a major under taking here,
and maintaining patches until upstream came on board would be a 
headache, I gave up with the little bit I came up with for multi-dhcp 
provider support for fedora. Maybe, I'm up for it now, if there is 
others who are interested, otherwise I'm not going to bother trying to 
change the world.


Jerry


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to