Re: RE: Problems with providers

Jerry Vonau
Fri, 29 Jul 2005 05:00:44 -0000

Derek:

Ok, I''m tried of trying to extract the info required to debug this,
from
you.
<snip>
>> Ok it''s getting clearer, eth1 and eth3 are your providers,
eth5 is the
>> local zone. what are eth2 and eth4, dmz interfaces?
>Eth2 is just another interface that has some additional IPs from one of
>our providers.

This is a useless statement, which ips from what provider?

>This is where the DNAT entries forward from.  I suppose
>the logic behind it was not to bog down one interface with too much
>physical traffic.  I take it that these should be on the regular
>provider interface to avoid problems down the line?

Not really, but you need to have the routes setup correctly.

<snip>
>> and add
>> a host route on the provider''s interface to the gateway.
>>
>Ok, I''ll check this out.

>> Where does eth4 fit into all this?
>>
>Eth4 is a second interface that is the DMZ interface for a class C that
>we have through one of our providers.  We''re in the process of
getting
>an ASN number to route between the providers, but that comes later.

Again, useless info, which provider? What address range?

Unless I see a shorewall status, I''m done with this. No, an "ip
route" is
not
enough info, you have to capture the providers tables also, which the
status
does.

Jerry




-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO September
19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing
& QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf