On Sat, Sep 14, 2013 at 9:01 AM, Tom Eastep <teas...@shorewall.net> wrote: > On 09/14/2013 08:17 AM, Tom Eastep wrote: > > FWIW, my failed experiments were on my main gateway that runs Debian 7. > And the Shorewall configuration that works on Foobar 6 fails on Debian 7. > -Tom FYI, Works fine on CentOS 5 too. [CAVEAT: 10.1.5.1 is my FW address, not the next-hop. That does create an inactive route...] (config)# ip route 1.2.3.4/32 10.1.5.1 # show ip route Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - ISIS, B - BGP, > - selected route, * - FIB route
S>* 1.2.3.4/32 [1/0] via 10.1.5.1, eth1.5 [root@centralservices ~]# ip route 65.209.210.217 dev eth1.8 scope link src 65.209.210.218 24.52.191.241 dev eth1.9 scope link src 24.52.191.244 1.2.3.4 via 10.1.5.1 dev eth1.5 proto zebra equalize --lee ------------------------------------------------------------------------------ LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99! 1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint 2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/22/13. http://pubads.g.doubleclick.net/gampad/clk?id=64545871&iu=/4140/ostg.clktrk _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users