On 4/25/2014 7:18 PM, Michael Kress wrote: > Sorry forgot to mention: > After establishing the openvpn connection, the .up script executes the > following: > > /sbin/ip route add default dev tun1 table tun1.out > /sbin/ip rule add from x.x.x.245 table tun1.out pref 1000 > > That is certainly relevant somehow...
If you are going to do policy routing with Shorewall, then please do it the Shorewall way with /etc/shorewall/providers. Make tun1 an optional interface and make it a provider. And I recommend USE_DEFAULT_RT=Yes in shorewall.conf. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Start Your Social Network Today - Download eXo Platform Build your Enterprise Intranet with eXo Platform Software Java Based Open Source Intranet - Social, Extensible, Cloud Ready Get Started Now And Turn Your Intranet Into A Collaboration Platform http://p.sf.net/sfu/ExoPlatform
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
