search for: isp1

Hello, Thanks for the great Shorewall which has replaced my hard to maintain home-made scripts. First, what works. Our local network is 10.48.X.X with multiple vlan, each on a dedicated interface. We use Shorewall 4.4.11 from Debian Squeeze. We have a 2 ISP: - isp1 : an optical fiber provider with 10 Mbps. - isp2 : a DSL provider with 15Mbits/1Mbits. We use isp2 as the default outgoing provider. The isp1 provider is used for "critical" services (SSH...) and for incoming connections (VPN...). Our interfaces file : ======================== isp1 e...

...allocated, 16712865 freed) (ctl6:isp0:0:0:2): 0 CTIOs outstanding (16712865 sent, 16712865 returned (ctl8:isp0:0:0:3): 0 requests total waiting for CCBs (ctl8:isp0:0:0:3): 0 CCBs oustanding (16699727 allocated, 16699727 freed) (ctl8:isp0:0:0:3): 0 CTIOs outstanding (16699727 sent, 16699727 returned isp1: max tagged openings: 4096, max dev openings: 4096 isp1: max_ccbs: 20488, ccb_count: 1 isp1: ccb_freeq is NOT empty isp1: alloc_queue.entries 0, alloc_openings 4096 isp1: qfrozen_cnt:0:0:0:0:0 (ctl3:isp1:0:0:0): 0 requests total waiting for CCBs (ctl3:isp1:0:0:0): 0 CCBs oustanding (0 allocated, 0...

Hello everybody: Here is my "network layout": ISP1 ISP2 | | | | +-----eth0---------eth1------+ | | | FC 3 box | | | +-----eth2---------eth3------+...

Hi, I am migrating from one ISP to another, and would like to run both simultaneously for a while. So: (both netmask 255.255.255.248) [ISP1] 24.106.62.180 [ISP2] 209.181.237.230 | | | | \ / -----[ HUB ]----- | | -------- eth0 --------- | Linux FW/Server | ---------eth1 --------- | | [ HUB ] | 10.0.0.x/255.255.255.0 The default IP on eth0 in my RedHat 7.2 box is ISP1 and it'...

Hi, At office, we have I ISPs. I want to lightly monitor each link latency in order to decide several routing. For that, I have only one external server: 1 IP, it's an OVH dedicated server. The quick picture is http://s24.postimg.org/n3436z64l/defaul_route.png Default route is via ISP1. If OVH-server pings IP1: - the request will go through ISP1: it's OK - the reply will go through ISP1: it's OK If OVH-server pings IP2: - the request will go through ISP2: it's OK - the reply will go through ISP1: it's KO because the metric will involve ISP1 How could I tell the...

Hello All, I have two Internet link and two LAN networks I have Redhat-7.1 linux-2.4.17 kernel and 2 NICs In eth0 172.16.1.1 and eth0:1 192.168.1.1 in eth1 are public ips of isps as eth1 a.b.c.d and eth1:0 w.x..y.z I want do source routing using ip rule command. echo 200 isp1 >> /etc/iproute2/rt_tables ip rule add from 172.16.1.0/24 table isp1 ip rule ls 0: from all lookup local 32765: from 172.16.1.0/24 lookup isp1 32766: from all lookup main 32767: from all lookup default ip route add default via a.b.c.d dev eth1 table isp1 ip route flush cache Its w...

Hello,I have single linux router ( fedora core 1 ), 2 ISP, 1 internal network,1 IP space from every ISP My scenario: eth0 1.0.0.2 netmask 255.255.255.252 -> ISP 1 eth1 2.0.0.2 netmask 255.255.255.252 -> ISP 2 eth2 1.0.1.1 netmask 255.255.255.0 -> IP space from ISP1 eth3 2.0.1.1 netmask 255.255.255.0 -> IP space from ISP2 Config I try: /etc/iproute2/rt_tables: 10 isp1 20 isp2 ip add rule from 1.0.1.0/24 table isp1 ip add rule from 2.0.1.0/24 table isp2 route del default ip route add default via 1.0.0.1 table isp1 ip route add default via 2.0.0.1 table i...

Hi, I want to configure QoS in my shorewall conf but I have a doubt. Now I am using tcrules with prerouting and with the file providers, like this. 2:P 192.168.0.11 0.0.0.0/0 tcp 25 So, with this way I route my smtp traffic with my provider number 2. Well, now I want to configure QoS with tcclasses and tcdevices, but if I do that I need to use the MARK in the tcclasses So, how

...seeking help for it. Let''s move to the subject. We have a small ISP and we are moving a linux box running RH 7.1 to avoid having to set up BGP because we don''t have an ASN. What we want to do is to implement redundancy to the services. The way we managed to do it is like this: ISP1 ISP2 | | | | |______ ISP _________| Linux RH 7.1 ver 2.4.2-2 | | ___________|_______________ | | | | | | boxes with services we provide This is the cenario: . ISP1 and ISP2 a...

I need to route: from 196.33.50.0/25 (default route) to ISP1 from 196.33.248.0/24 (default route) to ISP2 ISP1 --------- fire --+---- 196.33.248.0/24 / | ISP2 --------/ +---- router ----- router ----- 196.33.50.0/25 What I''ve done: Default route via ISP1 created routing table ISP2 for default route via ISP2 I would li...

Hi there. Currently, our network design has two ISP lines and 3 subnets for LAN. Below are some details :- eth0 - isp1 eth1 - isp2 eth2 - subnet1 eth3 - subnet2 eth4 - subnet3 What i wanted to do is to assign incoming port 80 to our local squid server running on the firewall itself and assigned it to eth0(ISP1). I think it shouldnt be a problem as /etc/shorewall/rules provides a sample of the rule. For ISP2, i wan...

Hi, I have a simple question. I have my firewall with 2 external Ip and 1 lan. For example ISP1 FW LAN----Mail Server ISP2 Ok, when i DANT the smpt port to my mail server, I can see that the conection in my mail server comes from the external IP of my ISP. I need to change this so the conection to my mail server cames from the LAN IP from my firewall Is this possible?...

hello, i have 2 links to the ISP of 128kbit each, and i want to balance the trafic between them, but not staticly (local ip1-5 throw isp1, and the rest to isp2). I though at a ingress clasification, then routing by the mark, and at the exit nat (yes i must do nat :(((, but the clasification must be flow based, and i dont know how to do it. C _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl h...

...orewall box as the router. I have 4 ports on it (currently configured for local, dmz, and net) and was planning on using the 4th for the new provider. It will be part of a /30 subnet connecting to our ISP. We also have a /27 subnet for public IPs. So my thought is something like: ISP1/27 ISP2/30 |p2p1 |p2p2 +-----------------------+ | firewall/router |---em2 dmz 192.168.201.1/29 | | ISP2/27 +-----------------------+ |em1 loc 10.10.0.1/16 We use nat for some servers...

I''ve just started to recently look at CBQ and HTB, but I''ve been wondering whether or not something like the following is possible: I''ve got two external links: +--+ | |-----ISP1 |FW| | |-----ISP2 +--+ One link has a bandwidth cap, and the other doesn''t. What I want to do is, punt all outbound traffic out via ISP1 (free), but if it''s outbound capacity becomes full, start directing subsequent connections out via ISP2. This way IS...

Hi all, I have a similar question like many asked before I know but Please help as i cant figure out where the problem is and how should I tackle. I have 2 ISP connections. I want to share the bandwidth from both. I have copied the script from many places and created my own after changes. Problem is that only one connection is utilized at a time. Not both working. ratio of consuming

hi all, i have this situation: isp1 | dmz ----- FW linux ----- isp2 |----------------------------------- vpn concentrator ----- various ipsec lan-2-lan | LAN In lan i have "pc zone" and "server zone", same network. Dmz and server zone brows...

...------------------------------------------------------ Load balancing works well, and everything seems to be OK. But there is a problem: two uplinks are from different ISP''s, so they have their own SMTP servers. I have to use only one SMTP server to send e-mail, so I set up SMTP server of ISP1 in my e-mail client program. But because of load balancing, SMTP traffic sometimes go through the second line ISP2, and then the SMTP server of ISP1 refuses to accept my message. So I would like to "tie" SMTP traffic to ISP1 line. What rules should I use? Perhaps I should mark all the SM...

...e add from 192.168.0.20 table ADSL2_rules Unfortunately, if I want to do the reverse it does not work. I can''t have a host prefer one ADSL line, but still receive traffic from the other ADSL line. It may sound weird, but I only want to have one host reply to any of the two IPs, either from ISP1 or ISP2. With the current configuration I can''t. It works ok the default ISP of the host, but can''t make it to work for the other. 2. I tried using ip route add equalize default scope global nexthop via myADSL1_IP dev eth2 weight 1 nexthop via myADSL2_IP dev eth1 weight 1 It does...

I set up this config: +------+ -+ ISP1 +--+ +------+ | +-------+ +--+ linux | +------+ | +-------+ -+ ISP2 +--+ +------+ No problem. Standard setup with two ISP''s. Both routed subnets. Default gateway is ISP1. No magic here. Now I put a server behind the Linux box. I want the server to be reachable on an /ex...