On 8/28/2013 3:44 PM, Thomas Harold wrote: > > So a little background here: > > - We're running a multi-ISP configuration, a cable modem (wancbl) and a > T1 line (want1). Cable modem is the primary, T1 is the fallback. > > - Internal connection to the LAN is a bonded pair (bond0) of ethernet > devices in active-fallback mode. > > - NAT/MASQ outbound through the cable modem works, but doesn't fallback > to the T1; so it's almost, but not quite, setup. > > There's possibly other errors in the setup, but at the moment I'm more > interested in /etc/shorewall/stoppedrules. I've tried different ACCEPT > rules such as specifying the local IP address range, using "loc" in the > SOURCE/DEST column and using "bond0". >
Shorewall 4.5.4 Dump at fw2-sec - Wed Aug 28 18:31:52 EDT 2013
-----
Support for /etc/shorewall/stoppedrules wasn't added until Shorewall
4.5.8. In 4.5.8, you must use /etc/shorewall/routestopped.
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more! Discover the easy way to master current and previous Microsoft technologies and advance your career. Get an incredible 1,500+ hours of step-by-step tutorial videos with LearnDevNow. Subscribe today and save! http://pubads.g.doubleclick.net/gampad/clk?id=58040911&iu=/4140/ostg.clktrk
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
