On 10/12/2012 08:02 AM, Thomas Mueller wrote:> hi
>
> i''ve asked lately if i''m on the right track to do nat,
providers and rtrules.
> Thanks Tom for your reply!
>
> Finally I got it working and I''d like to share it as an example.
>
> - Thomas
>
>
> Situation:
> * Shorewall 4.5.5.3
> * OS: Debian Squeeze
> * eth0 with ip 8.8.8.8 and ip alias 7.7.7.7 (eth0:0)
> * 8.8.8.8 has default gateway 8.8.8.1
> * 7.7.7.7 has default gateway 7.7.7.1
> * internal lan is 10.7.7.0/24
> * 10.7.7.13 is 7.7.7.7 external
> * all others get 8.8.8.8 external
>
>
> And are the relevant config files:
>
>
>
############################################################################################
> # providers
>
############################################################################################
> #NAME NUMBER MARK DUPLICATE INTERFACE GATEWAY
OPTIONS COPY
> cs1 1 1 main eth0:8.8.8.8 8.8.8.1
> cs2 2 2 main eth0:7.7.7.7 7.7.7.1
>
>
>
####################################################################################
> # rtrules
>
####################################################################################
> #SOURCE DEST PROVIDER PRIORITY
MASK
> 17.7.7.13 - cs2 1000
> 10.7.7.0/24 - cs1 1000
>
>
>
###############################################################################
> # masq
>
###############################################################################
> #INTERFACE SOURCE ADDRESS PROTO PORT(S)
IPSEC MARK
> eth0:0(cs2) 10.7.7.13 7.7.7.7
> eth0(cs1) 0.0.0.0/0 8.8.8.8
Thanks, Thomas!
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
------------------------------------------------------------------------------
Don''t let slow site performance ruin your business. Deploy New Relic
APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev