Greetings,
I have a firewall with two internet connection:
/etc/shorewall/providers
#NAME NUMBER MARK DUPLICATE INTERFACE GATEWAY
OPTIONS COPY
TISCALI 1 256 main eth2
217.133.234.182 track eth0,eth1
INFO1 2 512 main eth3
192.168.50.2 - eth0,eth1
LAN_TRANSPARENT_PROXY 14 1024 - eth1
192.168.0.205 loose
I use the ip on eth2 to do DNAT on some host in the LAN, but the response
doesn't go through eth2, since the default provider is on eth3:
/etc/shorewall/route_rules:
eth1 - INFO1 26002
>From my understanding, using the option "track" on eth2 should make return on
>eth2
the connections that arrive on eth2 and are DNATted on the hosts on the lan.
Since that doesn't happen, my question is if this depends on a wrong setup, or
if
it shouldn't work anyway since I'm still using route_rules instead of tcrules.
Besides, in the MultiSP howto is recommended to use shorewall 4.2, while I'm
still
shorewall 4.0.
This setup worked in shorewall 3.2, now as I work-around I'm forcing every host
who
receive DNAT connection to exit always through eth2.
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
