RE: RE: Problems with providers

Derek Murawsky
Wed, 27 Jul 2005 15:30:13 -0000

After going through the debug output I had a brainstorm (more
like a trickle) and got the dual providers to work.  It had something to
do with how I had assigned the extra external IP using ip addr in the
interfaces (Debian) file.  However after getting that working, the DNATs
that I had set up no longer functioned.  Well, I ended up toasting
something obscure and had to reinstall the box.
	I had two DNAT rules set up that were virtually identical, one
of which worked (port 25 to an exchange box), the other didn''t (1494 to
citrix server).  Despite my best efforts at debugging, I couldn''t
figure
out what happened and even copying in the old known-good configs didn''t
repair it.  Any idea what could have caused this?  I had been messing
around with "ip addr" to add extra IPs to external interfaces for the
forwarding.
	Anyway, I''m going to rework this from the ground up.
-Derek

-----Original Message-----
From: shorewall-users-admin@lists.sourceforge.net
[mailto:shorewall-users-admin@lists.sourceforge.net] On Behalf Of Jerry
Vonau
Sent: Tuesday, July 26, 2005 7:33 PM
To: shorewall-users@lists.sourceforge.net
Subject: Re: [Shorewall-users] RE: Problems with providers


I forgot one file, I am running some NAT:
#EXTERNAL       INTERFACE       INTERNAL       ALL INTERFACES   LOCAL
63.211.45.142   eth3            192.168.1.245  No               No
63.211.45.133   eth3            192.168.1.246  No               No

-----Original Message-----
From: Derek Murawsky
Sent: Tuesday, July 26, 2005 7:13 PM
To: ''Mailing List for Shorewall Users''
Subject: Problems with providers

Hello all,
I''m having a problem using multiple providers and shorewall on
an ubuntu linux box. (Debian clone)
My interfaces file does not have any routes assigned in it

I read the shorewall and routing docs and set up my providers file as:
#NAME   NUMBER  MARK    DUPLICATE       INTERFACE       GATEWAY
OPTIONS
cogent 2       2       main            eth1            66.28.28.79
track,balance=1
birns  3       3       main            eth3            63.211.45.129
track,balance=2

MASQ file is set up:
#INTERFACE              SUBNET          ADDRESS         PROTO   PORT(S)
IPSEC
eth3                    eth5            63.211.45.130
eth1                    eth5            66.28.28.78

I don''t think rules are important here, and I haven''t set up
anything
else fancy except openvpn
Tunnels file:
# TYPE                  ZONE    GATEWAY         GATEWAY
#                                               ZONE
openvpn                 net     4.79.128.50

<snip>

Any ideas on what''s going on?  Thanks in advance for any help.
-Derek

I know shorewall is not started, but can I get a shorewall status, just
to see the routing and interface info. A discription of what each nic
is plugged into can be helpful also.

Jerry






-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users


-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=click