Re: IPv6 source-based routing

Tom Eastep
Thu, 20 Oct 2011 23:19:59 -0000

On Oct 20, 2011, at 3:45 PM, Jeff Taylor wrote:

> I''m trying to figure out here... did you accidentally copy your
providers example under the route_rules as well, or is your configuration just
that vastly different from what I have here?  I''m running shorewall
4.4.6, it appears there are no further updates in my distro.

Which distro -- Gentoo?

> I''m trying to dig up more info on the route_rules file, beyond the
man page which doesn''t give any examples to work from, and hopefully
can do some testing with that later this evening.
>
> Also, the IPv6 addresses you specified lead me to believe that you may have
both addresses coming from the same HE server.  In my case, because I am
connected under two different providers, my tunnels are coming from two
different servers (fmt2 and lax1).  This is the particular scenario that they
added filtering against yesterday.  If both of your test connections are coming
from the same source, there is no filtering against crossovers between those, so
it wouldn''t be a valid test.


I''m not getting any crosstalk - I''ve verified that.

-Tom

Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________