Marcos Dione wrote: > NOTE: this mail started as a help call, but I've been wrinting it > through several days, and several tests that lead more to an > investigation that to an actual question. I think it's somewhat usefull, > specially if thewre are comments on why the different cases didn't work > as spected. take in account that I didn't try to fix its redaction. > > I have two ISPs, one reliable but restrictive and one unreliable but > open. I also have a internal network to which I should offer best effort > service. let me explain. > > the reliable network, let's call it UNC, only offers access to > http/s and ssh. the unreliable one. Arnet, lets me access any port, but > the BW is much smaller and often the link goes down. > > so what I want is to route all traffic, including the firewall > generated, through Arnet (even if it's unreliable), except http/s and > ssh, which goes though UNC, including traffic to the UNC network itself. > > my current configuration is: > > # shorewall.conf
Marcos, I'm sorry to hear that you are having problems with Shorewall Multi-ISP support and that I may have contributed to the problem. But it is virtually impossible for me to help people who sent snippets of their configuration files that then ask "Why doesn't it work?". The problem with configuration files is that they represent your interpretation of what is required for your particular configuration. But they don't tell us anything about that configuration itself. And when dealing with networking issues, the details are extremely important. When I don't have access to the details, the configuration files (especially pieces of those files) result in more questions than answers. That is why the Support Guidelines (http://www.shorewall.net/support.htm#Guidelines) ask that when you have any kind of connection problem that you send the output of 'shorewall dump' collected as described rather than sending configuration files. The 'shorewall dump' command has been under development since Shorewall was initially released, and its output is tailored to give us the best chance of solving your problem quickly. Maybe others on the list will be willing to dig through your post and try to understand what the problem is, I simply don't have the time to do that. Sorry, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT is a gathering of tech-side developers & brand creativity professionals. Meet the minds behind Google Creative Lab, Visual Complexity, Processing, & iPhoneDevCamp as they present alongside digital heavyweights like Barbarian Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
