Shorewall users - Jun 2005 - update

Hello again

I asked a question about routing a week or so back and have progressed
somewhat since then. I have managed to progress somewhat with proxy arp
but not with routing.

I will repeat my setup:

LAN is on eth0 and uses masq and 192.168.1.0/24

NET is on eth1 and default routes are on ISP routeur xxx.xxx.79.126 and
xxx.xxx.242.126

DMZ is on eth2 and consists of 2 complete class C blocks
xxx.xxx.242.0/24 and xxx.xxx.79.0/24 except for 5 addresses which are
outside the firewall 

As soon as I create the route to the DMZ on the firewall all traffic
from the LAN to the NET stops completely on Windows systems and slows to
a crawl on Mas OS X and Linux machines.

The network is not very tidy and the client does not want to reconfigure
his several hundred Windows servers... 

I am banging my head against the wall on this one...

Tony

Questions : 
> NET is on eth1 and default routes are on ISP routeur xxx.xxx.79.126 and
> xxx.xxx.242.126
- 2 default routes ? what goes that mean : putgoing load sharing ?
> DMZ is on eth2 and consists of 2 complete class C blocks
> xxx.xxx.242.0/24 and xxx.xxx.79.0/24 except for 5 addresses which are
> outside the firewall
- what do you mean 5 outside ? DNATed adresses ?
> As soon as I create the route to the DMZ on the firewall all traffic
> from the LAN to the NET stops completely on Windows systems and slows to
> a crawl on Mas OS X and Linux machines.
- what is the exact rule you do create ?

Please post your full configuration files here

Niko