Shorewall users - Oct 2005 - Configuring both ethernet and dial-up connections

Hi,

I usually have my laptop connected to the internet through eth0, so I
have "net eth0 detect" in my interfaces file. However, where I
don''t
have ethernet connection, I''d like to be able to use dial-up instead,
so it should be using the ppp0 interface then. Is it possible to have
both interfaces specified at once? Something like:

net eth0 detect
net ppp0 -

Would this work? Note that I don''t intend to actually use both
connections at the same time, but I want a shorewall configuration that
works in any case.

Thanks


		
___________________________________________________________ 
To help you stay safe and secure online, we''ve developed the all new
Yahoo! Security Centre. http://uk.security.yahoo.com


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl

On Thursday 20 October 2005 03:50, Ignacio Fernández Galván wrote:
>
> net eth0 detect
> net ppp0 -
>
> Would this work? Note that I don''t intend to actually use both
> connections at the same time, but I want a shorewall configuration that
> works in any case.
>
You can configure non-configured interfaces in Shorewall but you must be 
careful. Your first line above will not work if eth0 is not configured 
because ''detect'' requires that eth0 be up and configured with
an IPv4 address
when Shorewall starts.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

On Thursday 20 October 2005 11:52, Tom Eastep wrote:
> On Thursday 20 October 2005 03:50, Ignacio Fernández Galván wrote:
> > net eth0 detect
> > net ppp0 -
> >
> > Would this work? Note that I don''t intend to actually use
both
> > connections at the same time, but I want a shorewall configuration
that
> > works in any case.
>
> You can configure non-configured interfaces in Shorewall but you must be
That might be clearer stated as "You can define non-existant interfaces to 
Shorewall..."

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

--- Tom Eastep <teastep@shorewall.net> wrote:
> > > net eth0 detect
> > > net ppp0 -
> > >
> > > Would this work? Note that I don''t intend to actually
use both
> > > connections at the same time, but I want a shorewall
> configuration that
> > > works in any case.
> >
> > You can configure non-configured interfaces in Shorewall but you
> must be
> 
> That might be clearer stated as "You can define non-existant
> interfaces to 
> Shorewall..."
Thanks. Actually, my problem was with defining two interfaces with for
same zone, I wasn''t sure it was possible. Now I''ve tried and
it works
so far. Could a note about this (maybe an example like mine) be added
to the documentation? I didn''t see it anywhere, most pages (and usenet
posts, etc.) said to *replace* "net eth detect" with "net ppp0
-".
Since my eth0 is always up, even when unplugged and with no route
associated, I guess this is no problem... I guess, because I still
haven''t tried the ethernet connection.


		
___________________________________________________________ 
To help you stay safe and secure online, we''ve developed the all new
Yahoo! Security Centre. http://uk.security.yahoo.com


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl

Ignacio escribió on 21/10/2005 14:41:53:
> --- Tom Eastep <teastep@shorewall.net> wrote:
> 
> 
> Thanks. Actually, my problem was with defining two interfaces with for
> same zone, I wasn''t sure it was possible. Now I''ve tried
and it works
> so far. Could a note about this (maybe an example like mine) be added
> to the documentation? I didn''t see it anywhere, most pages (and
usenet
> posts, etc.) said to *replace* "net eth detect" with "net
ppp0 -".
> 
http://www.shorewall.net/shorewall_setup_guide.htm
look for "Multiple Interfaces per Zone" - your example is there...

cheers