Re: How to continue ?

Israel Santana Alemán
Thu, 24 Aug 2006 08:52:31 -0000

El mié, 23-08-2006 a las 10:44 -0700, Tom Eastep
escribió:
> On Wed, 2006-08-23 at 18:36 +0100, Israel Santana Alemán wrote:
> > El mié, 23-08-2006 a las 09:44 -0700, Tom Eastep escribió:
> > > On Wed, 2006-08-23 at 17:06 +0100, Israel Santana Alemán wrote:
> > >
> > > >
> > > > The thing is that when I start waking up the next interfaces
which I
> > > > don't know how to continue. The idea is that the rest of
the traffic of
> > > > the interfaces (eth3, eth4) comes out from the eth0. Here is
where I get
> > > > lost, and I don't know so much how to continue, I guess
I have to define
> > > > eth0 as a provider in providers, but I don't know so
much how to do it
> > >
> > > You just add another entry to the providers file -- do not
specify
> > > 'balance' for that entry.
> > >
> > Right ?
> >
> > DSL1	1	1	main	eth1.100	10.190.1.1	track,balance	eth2
> > DSL2	2	2	main	eth1.101	10.190.2.1	track,balance	eth2
> > DSL3	3	3	main	eth1.103	10.190.3.1	track,balance	eth2
> > DSL4	4	4	main	eth0	10.190.4.1	track
> >
> >
>
> No. You need to include eth3,eth4 in the COPY column.
I had done all, my "lo" interfaces goes trought eth0, eth2 is
load-balanced with vlan's, but eth3 and eth4 doesn't work.

<zones>
fw	firewall
bal	ipv4
in	ipv4
out	ipv4
</zones>

<interfaces>
bal	eth2		detect
in	eth3		detect
in	eth4		detect
out	eth1.100	detect
out	eth1.101	detect
out	eth1.102	detect
</interfaces>

<masq>
eth1.100	10.190.2.5	10.190.1.5
eth1.100	10.190.3.5	10.190.1.5
eth1.101	10.190.1.5	10.190.2.5
eth1.101	10.190.3.5	10.190.2.5
eth1.102	10.190.1.5	10.190.3.5
eth1.102	10.190.2.5	10.190.3.5
eth1.100	eth2
eth1.101	eth2
eth1.102	eth2
eth0		eth3
eth0		eth4
</masq>

<policy> (just for testing)
fw	all	ACCEPT
bal	all	ACCEPT
in	all	ACCEPT
out	out	DROP
all	all 	DROP
</policy>

<providers>
ADSL1 	1	1	main	eth1.100	10.190.1.1	track,balance	eth2
ADSL2	2	2	main	eth2.101	10.190.2.1	track,balance	eth2
ADSL3	3	3	main	eth3.102	10.190.3.1	track,balance	eth2
ADSL4	4	4	main	eth0	10.190.4.1	track	eth3,eth4
</providers>

<route_rules>
eth3	-	ADSL4	1000
eth4	-	ADSL4	1000
lo	-	ADSL4	1000
</route_rules>




>
> -Tom
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
>
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________ Shorewall-users mailing
list Shorewall-users@lists.sourceforge.net