Re: How to continue ?

Tom Eastep
Wed, 23 Aug 2006 16:44:56 -0000

On Wed, 2006-08-23 at 17:06 +0100, Israel Santana Alemán wrote:

>
> The thing is that when I start waking up the next interfaces which I
> don''t know how to continue. The idea is that the rest of the
traffic of
> the interfaces (eth3, eth4) comes out from the eth0. Here is where I get
> lost, and I don''t know so much how to continue, I guess I have to
define
> eth0 as a provider in providers, but I don''t know so much how to
do it

You just add another entry to the providers file -- do not specify
''balance'' for that entry.

> and I have thought in using route_rules with the option activate
> HIGH_ROUTE_MARKS=YES in shorewall.conf.

You don''t need HIGH_ROUTE_MARKS=Yes. That has nothing to do with the
problem you are trying to solve; it rather allows you to use CONNMARK
rules for traffic shaping.

>
> route_rules
> <verbatim>
> eth3    -       providereth0    1000
> eth4    -       providereth0    1000
> </verbatim>

Correct.

>
> If i want to take out all the traffic that comes from the firewall to
> eth0, it wil be only adding "lo" to the file of route_rules?
>

That''s right.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key