Shorewall users - Sep 2003 - 4 Network Card Issues

hello, hopfully one of you folks will be able to give me a hand, i''m
new using shorewall seems to be a great investment of time so far one of the
most robust iptables firewalls i''ve seen out there, but i''m
having an issue
my network is as follows

4 realtek 8139''s in a celeron 1.7/512ram
1(eth3) network card handles the adsl connects (2 of them so ppp0 and ppp1)
and the other nics handle inbound local lan traffic 

that being said i have 3 sets of nat''d ips (192.168.20.0,192.168.21.0
and 192.168.22.0)
eth0 eth1 and eth2 respectivly.

my problem is that when i setup shorewall to have 1 subnet nating off of ppp1
and the other 2 off of ppp0 i have very unstable internet access if any at all
alot of the times i get timeouts on tracerts or pings but i can resolve names so
usually getting to the gateway of my isp or they''re dns servers but not
any farther. is this something that is out of the question doing with shorewall
or maybe i''m just thinking the wrong way about it, if anyone could
offer any assistance i would be greatly apprechiated.

Ryan Toomer

On Sun, 21 Sep 2003, Ryan Toomer wrote:

PLEASE - post in plain text and configure your mailer to fold long lines.
> 4 realtek 8139''s in a celeron 1.7/512ram
> 1(eth3) network card handles the adsl connects (2 of them so ppp0 and ppp1)
> and the other nics handle inbound local lan traffic 
> 
> that being said i have 3 sets of nat''d ips
(192.168.20.0,192.168.21.0
> and 192.168.22.0) eth0 eth1 and eth2 respectivly.
> 
> my problem is that when i setup shorewall to have 1 subnet nating off of
> ppp1 and the other 2 off of ppp0 i have very unstable internet access if
> any at all alot of the times i get timeouts on tracerts or pings but i
> can resolve names so usually getting to the gateway of my isp or
they''re
> dns servers but not any farther. is this something that is out of the
> question doing with shorewall or maybe i''m just thinking the wrong
way
> about it, if anyone could offer any assistance i would be greatly
> apprechiated.
> 
Sounds like you haven''t set up your routing correctly. If you want to
use
SNAT as you have described above, you must configure both Shorewall AND 
YOUR ROUTING to make it happen.

See the Linux Advanced Routing and Traffic Control (LARTC) Howto -- 
there''s a link from the "Useful Links" page on the Shorewall
site.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net