Re: How to continue ?

Israel Santana Alemán
Wed, 23 Aug 2006 17:36:16 -0000

El mié, 23-08-2006 a las 09:44 -0700, Tom Eastep
escribió:
> On Wed, 2006-08-23 at 17:06 +0100, Israel Santana Alemán wrote:
>
> >
> > The thing is that when I start waking up the next interfaces which I
> > don't know how to continue. The idea is that the rest of the
traffic of
> > the interfaces (eth3, eth4) comes out from the eth0. Here is where I
get
> > lost, and I don't know so much how to continue, I guess I have to
define
> > eth0 as a provider in providers, but I don't know so much how to
do it
>
> You just add another entry to the providers file -- do not specify
> 'balance' for that entry.
>
Right ?

DSL1	1	1	main	eth1.100	10.190.1.1	track,balance	eth2
DSL2	2	2	main	eth1.101	10.190.2.1	track,balance	eth2
DSL3	3	3	main	eth1.103	10.190.3.1	track,balance	eth2
DSL4	4	4	main	eth0	10.190.4.1	track


> > and I have thought in using route_rules with the option activate
> > HIGH_ROUTE_MARKS=YES in shorewall.conf.
>
> You don't need HIGH_ROUTE_MARKS=Yes. That has nothing to do with the
> problem you are trying to solve; it rather allows you to use CONNMARK
> rules for traffic shaping.
>
> >
> > route_rules
> > <verbatim>
> > eth3    -       providereth0    1000
> > eth4    -       providereth0    1000
> > </verbatim>
>
> Correct.
>
> >
> > If i want to take out all the traffic that comes from the firewall to
> > eth0, it wil be only adding "lo" to the file of route_rules?
> >
>
> That's right.
>
> -Tom
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
>
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________ Shorewall-users mailing
list Shorewall-users@lists.sourceforge.net