Re: Advice on multiple interfaces

Ray Booysen
2006-02-17T12:52:14Z

Chris Mason (Lists) wrote:
> I have decided against the solution I was working on that I referred
> to in my previous post "Traffic from other firewall", it is way
too
> messy and would be a nightmare to debug in the future.
>
> Instead, I have decided to devote a dual psu, dual hd machine into a
> dedicated shorewall firewall to replace the m0n0wall unit as the main
> firewall.
> I have purchased an older Dell 2450 machine for this purpose.
>
> I have no problems getting it working as a single interface machine, I
> have lots of experience with Shorewall,  but I am looking for some
> guidance on the multiple interface/multiple ISP configuration which I
> have never done before.
>
> This is not a simple (!) load balancing solution, I do not want
> dynamic balancing. Let me detail the feeds and tell you what I am
> trying to achieve.
>
> ISP1: Static IP, Fixed guaranteed bandwidth, expensive, want to keep
> for VOIP.
> ISP2: ADSL, dhcp, cheap, want to route outgoing browsing traffic so
> guests and staff do not load ISP1.
> ISP3: Cable internet, reserved IP, cheap, lousy quality, want to serve
> internal webcam on it.
>
> Is listing the feeds in the providers file the way to go, or should I
> just establish zones for each and use rules to route? I am a bit lost
> here so I need the help of the esteemed list members to put me on the
> right track. It''s hard to simulate this setup in the lab so I need
to
> get it right from the start.
>
Sounds like a great case study for shorewall. :)

--
Ray Booysen
rj_booysen@rjb.za.net