Tom Eastep wrote:
Tom Eastep wrote:
CHAUSSEE Pierre wrote:
It seems the file is not easy to download, and it's to big to just be printed in the message. Here's a link which allows you to download it : http://www.clyl.net/dump.shorewall.bz2

Once again please help I've been, trying to reset everything three times, I can't see what's wrong.


The route_rule with priority 50 needs to be removed -- none of your existing connections have any chance of working with that rule in place. Other than that, I don't see anything wrong with your setup.

In fact, the more I look at those route rules, I don't believe that all of them were generated by Shorewall. They definitely aren't correct.

One thing you need to be aware of is that Shorewall doesn't remove all routing rules and start from scratch. It only removes those rules that it added previously. So if you have your own multi-ISP rules in place, restarting with Shorewall multi-ISP support probably isn't going to work.


Compare your routing rules with those shown in the Shorewall Multi-ISP article:

Until Shorewall 4.2 with USE_DEFAULT_RT=Yes, Shorewall has always generated rules with the following priority ranges:

0 - local lookup
10000-10999 - fwmark rules
20000-25999 - Source-IP rules
32766       - main
32767       - default

As you can see, yours look nothing like that. Are you using your own script to write the routing rules? If so, you need to disable that script when you enable Shorewall multi-ISP support.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to