Good Afternoon I use shorewall to do multi ISP both IPv4 and IPv6
About IPv4(shorewall) is no problem but ipv6(shorewall6) has problem cant start when i write config in /etc/shorewall6/providers Spite of is really close config I use centos 6.3 kernel 2.6.32-279.el6.i686 - iptables 1.4.7-5.1 - shorewall & shorewall6 version 4.5.11.2 Thank you for your help ^_^ At Iast i attach some involved config file below /etc/shorewall6/interfaces >>#ZONE INTERFACE OPTIONS >>net eth0 tcpflags,forward=1,sourceroute=0 >>net eth2 tcpflags,forward=1,sourceroute=0 >>loc eth1 tcpflags,forward=1 /etc/shorewall6/providers >>#NAME NUMBER MARK DUPLICATE INTERFACE GATEWAY OPTIONS COPY >>ISP1 1 1 main eth0 1:1:1:1::1 track none Some trace about shorewall6 cant start >>Compiling... >>Processing /etc/shorewall6/params ... >>Processing /etc/shorewall6/shorewall6.conf... >>Loading Modules... >>Compiling /etc/shorewall6/zones... >>Compiling /etc/shorewall6/interfaces... >>Determining Hosts in Zones... >>Locating Action Files... >>Compiling /usr/share/shorewall6/action.Drop for chain Drop... >>Compiling /usr/share/shorewall6/action.AllowICMPs for chain AllowICMPs... >>Compiling /usr/share/shorewall6/action.Broadcast for chain Broadcast... >>Compiling /usr/share/shorewall/action.Invalid for chain Invalid... >>Compiling /usr/share/shorewall/action.NotSyn for chain NotSyn... >>Compiling /usr/share/shorewall6/action.Reject for chain Reject... >>Compiling /etc/shorewall6/policy... >>Compiling TCP Flags filtering... >>Compiling Accept Source Routing... >>Compiling /etc/shorewall6/providers... >>Compiling MAC Filtration -- Phase 1... >>Compiling /etc/shorewall6/rules... >>Compiling MAC Filtration -- Phase 2... >>Applying Policies... >>Generating Rule Matrix... >>Optimizing Ruleset... >>Creating ip6tables-restore input... >>Compiling Interface forwarding... >>Shorewall configuration compiled to /var/lib/shorewall6/.start >>Starting Shorewall6.... >>Initializing... >>Processing /etc/shorewall6/init ... >>Processing /etc/shorewall6/tcclear ... >>Setting up Accept Source Routing... >>Setting up Proxy NDP... >>Adding Providers... >>RTNETLINK answers: Invalid argument >> ERROR: Command "ip -6 route add default via 1:1:1:1::1 src 1:1:1:1::2 dev eth0 table 1" Failed >>Processing /etc/shorewall6/stop ... >>Processing /etc/shorewall6/tcclear ... >>Running /sbin/ip6tables-restore... >>IPv6 Forwarding Enabled >>Processing /etc/shorewall6/stopped ... >>/usr/share/shorewall/lib.common: line 112: 5876 Terminated $SHOREWALL_SHELL $script $options $@ ------------------------------------------------------------------------------ Symantec Endpoint Protection 12 positioned as A LEADER in The Forrester Wave(TM): Endpoint Security, Q1 2013 and "remains a good choice" in the endpoint security space. For insight on selecting the right partner to tackle endpoint security challenges, access the full report. http://p.sf.net/sfu/symantec-dev2dev _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
