Re: RE: Problems with providers

Jerry Vonau
Wed, 27 Jul 2005 17:07:06 -0000

Derek:

>After going through the debug output I had a brainstorm (more
>like a trickle) and got the dual providers to work.  It had something to
>do with how I had assigned the extra external IP using ip addr in the
>interfaces (Debian) file.

Can you post the commands you were using?

>However after getting that working, the DNATs
>that I had set up no longer functioned.  Well, I ended up toasting
>something obscure and had to reinstall the box.
>I had two DNAT rules set up that were virtually identical, one
>of which worked (port 25 to an exchange box), the other didn''t
(1494 to
>citrix server).  Despite my best efforts at debugging, I couldn''t
figure
>out what happened and even copying in the old known-good configs
didn''t
>repair it.  Any idea what could have caused this?  I had been messing
>around with "ip addr" to add extra IPs to external interfaces for
the
>forwarding.

From your earlier trace, looks like you''re adding network routes for
the
aliases
also, there should be only one network route and it should be with the
primary ip
address of that interface.
>Anyway, I''m going to rework this from the ground up.
>-Derek

Why not just let shorewall create the aliases for you?
Jerry



-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click