search for: rtrule

...put in masq two rows like this: INTERFACE SOURCE ADDRESS $IF_ISP1 $ISP2_IP $ISP1_IP $IF_ISP2 $ISP1_IP $ISP2_IP Exactly the same issue happens when you use tcrules to direct a particular application through either one of the ISP, and the solution is the same. This problem does not exist if you use rtrules instead of tcrules to direct traffic to one of the providers. This happens because an rtrules line directly causes a routing policy rule to be created. So when the kernel selects the source IP, the lookup "sees" this rule, and is done right. Obviously, however, rtrules is a lot less flex...

...f tcinterfaces and tcrules, and causes no ingress policing to be configured. 2) MARK_IN_FORWARD_CHAIN=Yes no longer generates an error when $FW:<address> is entered in the SOURCE column of the tcrules file. New Features: 1) The route_rules file has been renamed to ''rtrules''. The Shorewall and Shorewall6 installers will perform the rename on an existing file. If both files exist, route_rules will be processed and rtrules will be ignored. 2) Run-time address variables (e.g., &eth0) may now be used in the SOURCE column of the rtrule...

...f tcinterfaces and tcrules, and causes no ingress policing to be configured. 2) MARK_IN_FORWARD_CHAIN=Yes no longer generates an error when $FW:<address> is entered in the SOURCE column of the tcrules file. New Features: 1) The route_rules file has been renamed to ''rtrules''. The Shorewall and Shorewall6 installers will perform the rename on an existing file. If both files exist, route_rules will be processed and rtrules will be ignored. 2) Run-time address variables (e.g., &eth0) may now be used in the SOURCE column of the rtrule...

...th /usr/share/shorewall/prog.header and /usr/share/shorewall/prog.header6 are now in a new library - lib.core. The files /usr/share/shorewall/prog.footer is now used for both IPv4 and IPv6. 6) Run-time address variables (e.g., &eth0) may now be used in the SOURCE column of the rtrules files. 7) The route_rules file has been renamed to ''rtrules''. The Shorewall and Shorewall6 installers will perform the rename on an existing file. If both files exist, route_rules will be processed and rtrules will be ignored with a warning. 8) A ''PR...

hi I''ve got the situation that I have a virtual shorewall firewall/router which will get different single ip''s on one interface in different subnets with different gateways which need to be nat''ed to the inside network. I''d really love to do proxy arp but the provider isn''t able to give me an ip range (cloud computing hooray). If I understand it

...ect net eth2 net eth0 detect blacklist loc ppp+ zones: fw firewall loc ipv4 net ipv4 providers: tele 1 1 main eth0 1.2.3.1 track eth1 vpn 2 2 main eth2 10.10.10.1 track eth1 rtrules: - 192.168.2.0/24 vpn 1000 ------------------------------------------------------------------------------ For Developers, A Lot Can Happen In A Second. Boundary is the first to Know...and Tell You. Monitor Your Applications in Ultra-Fine Resolution. Try i...

Hi, I was reading document http://shorewall.net/MultiISP.html#idp3634200. Inspired by the document I was trying to establish the following changes: * one additional interface: COMA_IF * COM[A,B,C]_IF interfaces request IP address via DHCP * all non-RFC 1918 destined trafic is NATed from INT_IF to COMA_IF * all non-RFC 1918 destined trafic from GW is routed via COMB_IF by default * non-RFC 1918

...         external        4mbit           4mbit tun0            internal        2mbit           1mbit eth2            external        6mbit           796kbit eth3            external        6610kbit        796kbit ---------------------------------------------------------------------- /etc/shorewall/rtrules ---------------------------------------------------------------------- 192.168.16.0/20         <IP>/23        sdsl            1000 ---------------------------------------------------------------------- /etc/shorewall/tunnels -----------------------------------------------------------------...

Hi, I have a multi-isp configuration both on ppp interfaces. As one of them is 32Mbit/s and the other is 8Mbit/s , I have a weight setting of 4 to 1 as in the following providers file entries: vdsl 1 0x10000 - ppp1 - track,balance=4 adsl 2 0x20000 - ppp0 - track,balance=1 I would also like to have fallback between them so that if one is