Re: How to continue ?

Israel Santana Alemán
Thu, 24 Aug 2006 09:05:25 -0000

El jue, 24-08-2006 a las 09:52 +0100, Israel Santana Alemán
escribió:
> El mié, 23-08-2006 a las 10:44 -0700, Tom Eastep escribió:
> > On Wed, 2006-08-23 at 18:36 +0100, Israel Santana Alemán wrote:
> > > El mié, 23-08-2006 a las 09:44 -0700, Tom Eastep escribió:
> > > > On Wed, 2006-08-23 at 17:06 +0100, Israel Santana Alemán
wrote:
> > > >
> > > > >
> > > > > The thing is that when I start waking up the next
interfaces which I
> > > > > don''t know how to continue. The idea is that
the rest of the traffic of
> > > > > the interfaces (eth3, eth4) comes out from the eth0.
Here is where I get
> > > > > lost, and I don''t know so much how to
continue, I guess I have to define
> > > > > eth0 as a provider in providers, but I don''t
know so much how to do it
> > > >
> > > > You just add another entry to the providers file -- do not
specify
> > > > ''balance'' for that entry.
> > > >
> > > Right ?
> > >
> > > DSL1	1	1	main	eth1.100	10.190.1.1	track,balance	eth2
> > > DSL2	2	2	main	eth1.101	10.190.2.1	track,balance	eth2
> > > DSL3	3	3	main	eth1.103	10.190.3.1	track,balance	eth2
> > > DSL4	4	4	main	eth0	10.190.4.1	track
> > >
> > >
> >
> > No. You need to include eth3,eth4 in the COPY column.
> I had done all, my "lo" interfaces goes trought eth0, eth2 is
> load-balanced with vlan''s, but eth3 and eth4 doesn''t
work.
>
> <zones>
> fw	firewall
> bal	ipv4
> in	ipv4
> out	ipv4
> </zones>
>
> <interfaces>
> bal	eth2		detect
> in	eth3		detect
> in	eth4		detect
> out	eth1.100	detect
> out	eth1.101	detect
> out	eth1.102	detect
> </interfaces>
>
> <masq>
> eth1.100	10.190.2.5	10.190.1.5
> eth1.100	10.190.3.5	10.190.1.5
> eth1.101	10.190.1.5	10.190.2.5
> eth1.101	10.190.3.5	10.190.2.5
> eth1.102	10.190.1.5	10.190.3.5
> eth1.102	10.190.2.5	10.190.3.5
> eth1.100	eth2
> eth1.101	eth2
> eth1.102	eth2
> eth0		eth3
> eth0		eth4
> </masq>
>
> <policy> (just for testing)
> fw	all	ACCEPT
> bal	all	ACCEPT
> in	all	ACCEPT
> out	out	DROP
> all	all 	DROP
> </policy>
>
> <providers>
> ADSL1 	1	1	main	eth1.100	10.190.1.1	track,balance	eth2
> ADSL2	2	2	main	eth2.101	10.190.2.1	track,balance	eth2
> ADSL3	3	3	main	eth3.102	10.190.3.1	track,balance	eth2
> ADSL4	4	4	main	eth0	10.190.4.1	track	eth3,eth4
> </providers>
>
> <route_rules>
> eth3	-	ADSL4	1000
> eth4	-	ADSL4	1000
> lo	-	ADSL4	1000
> </route_rules>
>
>
>
I would apoligize Tom, I don''t read your email with de subject
"[Shorewall-users] Submitting Problem Reports" :(, I''m going
to do
>
> >
> > -Tom
> >
-------------------------------------------------------------------------
> > Using Tomcat but need to do more? Need to support web services,
security?
> > Get stuff done quickly with pre-integrated technology to make your job
easier
> > Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
> >
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> > _______________________________________________ Shorewall-users
mailing list Shorewall-users@lists.sourceforge.net