Shorewall users - Dec 2004 - 2 net connections confusion

I''ve been digging around the documentation and seem to have just 
confused myself.

Here is what I have on a fedora core 3 machine with 4 network cards (the 
built in is dead)

eth2 - connects to the web via dsl-line-1
eth4 - connects to the web via dsl-line-2

eth2 is the route the local network addresses 10.1.x.x connected via 
eth0 go out on
eth4 is the route the dmz network addresses on 10.2.1.x connected via 
eth3 go out on


my zones file is below
# loc - connection to the internal network
loc      eth0           detect          dhcp
# dmz - connection to the dmz
dmz      eth3           detect
# net2 - dsl line 2 for dmz connections
net2     eth4           detect          
norfc1918,nobogons,blacklist,tcpflags,nosmurfs
# net - dsl line 1 for loc connections
net      eth2           detect          
norfc1918,nobogons,blacklist,tcpflags,nosmurfs

I''ve got a nat setup for the computer sitting on the dmz at 10.2.1.10 
and I''m able to get to and from it as required.

I think I shouldn''t have too much trouble setting up the snat for the 
loc connections, but my question is this.
With 2 outgoing connections, how can I be sure that the dmz only uses 
the net2 connection and that the loc only uses the net connection?
Our DSL is pretty slow and sharing a line isn''t really something we
want
to do.

I believe that all I have to do to get the loc connections going out the 
way I want them is to set up
eth2 eth0
in the masq file.

How do I do the routing part?
thanks a ton in advance?
Brooke

On Wed, 2004-12-29 at 15:40 -0600, Brooke wrote:
> I believe that all I have to do to get the loc connections going out the 
> way I want them is to set up
> eth2 eth0
> in the masq file.
> 
> How do I do the routing part?
First, please take a look at Shorewall FAQ 32 -- then follow the links
to the LARTC web site. From these sources, you will learn how to set up
separate routing tables for your two DSL lines and how to assign certain
traffic to one routing table and the remaining traffic to the other
table.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key