Brian J. Murrell wrote:
Do you think my proposed routing rules/tables reorganization would not achieve that, or not work at all?
I believe that it doesn't work at all. You have to know where a packet is going before you mark it. Try creating marking rules that work in your scheme where the firewall has a DMZ, a LOC zone and a two NET interfaces and you will see what I mean.
-Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
