Displaying 20 results from an estimated 500 matches similar to: "Problem with multiple ADSL lines"
2010 Mar 03
5
Applications running on the Firewall (MultiISP)
Hello,
it seems I am hit by http://shorewall.net/MultiISP.html#Local :
"Experience has shown that in some cases, problems occur with applications running on the firewall itself. This is especially true when you have specified routefilter on your external interfaces in /etc/shorewall/interfaces (see above). When this happens, it is suggested that you have the application use specific local IP
2006 Mar 14
9
firewall problem
snat not working
my local ip is aaa.aaa.aaa.aaa
asterisk sitting on the internet at ip bbb.bbb.bbb.bbb
my firewall''s internal ip is 192.168.0.254
i did snat:
iptables -t nat -A POSTROUTING -o ppp0 -j SNAT --to aaa.aaa.aaa
iptables -t nat -L -v gives:
Chain POSTROUTING (policy ACCEPT 23663 packets, 2182K bytes)
pkts bytes target prot opt in out source
destination
33056
2003 Sep 19
1
ip rule add (Changing order of rules?)
I need to route:
from 196.33.50.0/25 (default route) to ISP1
from 196.33.248.0/24 (default route) to ISP2
ISP1 --------- fire --+---- 196.33.248.0/24
/ |
ISP2 --------/ +---- router ----- router ----- 196.33.50.0/25
What I''ve done:
Default route via ISP1
created routing table ISP2 for default route via ISP2
I would like to do the following but they get
2003 Feb 28
6
2 internet ip numbers on eth0
Hi,
I am migrating from one ISP to another, and would like to run both
simultaneously for a while.
So:
(both netmask 255.255.255.248)
[ISP1] 24.106.62.180 [ISP2] 209.181.237.230
| |
| |
\ /
-----[ HUB ]-----
|
|
-------- eth0 ---------
| Linux FW/Server |
---------eth1 ---------
|
|
[ HUB ]
|
10.0.0.x/255.255.255.0
The default IP on
2005 Mar 01
11
Simple question about zones (haven''t found in FAQ)
Hello everybody:
Here is my "network layout":
ISP1 ISP2
| |
| |
+-----eth0---------eth1------+
| |
| FC 3 box |
| |
+-----eth2---------eth3------+
|
2004 Apr 04
2
2 ISP Routing Problem
Hello,I have single linux router ( fedora core 1 ), 2 ISP, 1 internal
network,1 IP space from every ISP
My scenario:
eth0 1.0.0.2 netmask 255.255.255.252 -> ISP 1
eth1 2.0.0.2 netmask 255.255.255.252 -> ISP 2
eth2 1.0.1.1 netmask 255.255.255.0 -> IP space from ISP1
eth3 2.0.1.1 netmask 255.255.255.0 -> IP space from ISP2
Config I try:
/etc/iproute2/rt_tables:
10 isp1
20 isp2
ip
2005 Jun 24
7
tcp redirect questions
Hi there. Currently, our network design has two ISP
lines and 3 subnets for LAN. Below are some details :-
eth0 - isp1
eth1 - isp2
eth2 - subnet1
eth3 - subnet2
eth4 - subnet3
What i wanted to do is to assign incoming port 80 to
our local squid server running on the firewall itself
and assigned it to eth0(ISP1). I think it shouldnt be
a problem as /etc/shorewall/rules provides a sample of
the
2013 Dec 03
5
Multiple ISP + traffic shapping = poor download speed
Hello,
Thanks for the great Shorewall which has replaced my hard to maintain home-made scripts.
First, what works.
Our local network is 10.48.X.X with multiple vlan, each on a dedicated interface. We use Shorewall 4.4.11 from Debian Squeeze.
We have a 2 ISP:
- isp1 : an optical fiber provider with 10 Mbps.
- isp2 : a DSL provider with 15Mbits/1Mbits.
We use isp2 as the default outgoing
2013 Jun 21
1
MultiISP.html documentation improvements
Hi all
I have been working with Shorewall connected to two ISPs lately, and I would
like to suggest a couple of improvements to the MultiISP.html documentation
page.
I followed the examples in that page (but the legacy setup and the
USE_DEFAULT_RT one), but I had problems with locally (by the firewall)
generated packets: I wanted them to go out using only one ISP, but if I use
a tcrules rule to
2010 Jun 01
4
Slightly OT: trying to mangle packets from Asterisk for a multiple ISP setup (reward)
Hi,
Reward offered: 50$ (paypal), and I am sure this is a ridiculous thing I
have missing.
My goal: On a 2 NIC Asterisk box, to send packets that came in Asterisk on
NIC1 back to NIC 1, and NIC2 back to NIC 2. (basically, send them back the
same way they came from).
I have been doing what was recommended to me and mangling packets left and
right. I have reached a point where I am
2006 Apr 08
4
source routing does not work with extra ip addresses
I set up this config:
+------+
-+ ISP1 +--+
+------+ | +-------+
+--+ linux |
+------+ | +-------+
-+ ISP2 +--+
+------+
No problem. Standard setup with two ISP''s. Both routed subnets. Default
gateway is ISP1. No magic here.
Now I put a server behind the Linux box. I want the server to be
reachable on an /extra/ IP in the routed subnet of ISP2.
+------+
-+ ISP1
2007 Sep 25
1
Local server unreachable by remote lan in dual isp configuration
hi all,
i have this situation:
isp1
|
dmz ----- FW linux ----- isp2
|----------------------------------- vpn
concentrator ----- various ipsec lan-2-lan
|
LAN
In lan i have "pc zone" and "server zone", same network.
Dmz and server zone browse internet through isp1, lan use isp2, and
remote
2008 Oct 21
7
DNAT or NAT - QUESTION
Hi, I have a simple question. I have my firewall with 2 external Ip and 1
lan.
For example
ISP1
FW LAN----Mail Server
ISP2
Ok, when i DANT the smpt port to my mail server, I can see that the
conection in my mail server comes from the external IP of my ISP.
I need to change this so the conection to my mail server cames from the LAN
IP from my firewall
Is this possible?
2003 Nov 10
2
flow classification
hello,
i have 2 links to the ISP of 128kbit each, and i want to balance the
trafic between them, but not staticly (local ip1-5 throw isp1, and the
rest to isp2). I though at a ingress clasification, then routing by the
mark, and at the exit nat (yes i must do nat :(((, but the clasification
must be flow based, and i dont know how to do it.
C
_______________________________________________
LARTC
2013 Oct 03
7
TCCLASSES vs Providers
Hi, I want to configure QoS in my shorewall conf but I have a doubt.
Now I am using tcrules with prerouting and with the file providers, like
this.
2:P 192.168.0.11 0.0.0.0/0 tcp 25
So, with this way I route my smtp traffic with my provider number 2.
Well, now I want to configure QoS with tcclasses and tcdevices, but if I do
that I need to use the MARK in the tcclasses
So, how
2007 Sep 12
21
MultiISP: failover and dynamic IP
Dear list,
Shorewall is running here with 2 ISP''s:
ISP1: corporate ADSL-line with fixed set of IP''s
ISP2: fast consumer-grade cable-connection with higher bandwidth
All our main traffic (web, e-mail) is routed trough ISP1. Only for
special purposes (frequent large ftp-transfers) ISP2 is used, configured
trough tcrules.
ISP2 is not so reliable as ISP1 (duh) and they sometimes
2004 Aug 03
0
Second isp failure with dual internet connection
Below is a snippet from my firewall script
isp1_ip="xx.0.5.20"
isp1_gw="xx.0.5.1"
isp1_net="xx.0.5.0/28"
isp1_if="eth2"
isp2_ip="xx.182.19.88"
isp2_gw="xx.182.19.1"
isp2_net="xx.182.19.0/28"
isp2_if="eth3"
lo_ip="127.0.0.1"
lo_if="lo"
lo_net="127.0.0.1/8"
2004 Aug 05
0
URGENT HELP needed!! Problem with second route dual ISP
Below is a snippet from my firewall script
isp1_ip="xx.0.5.20"
isp1_gw="xx.0.5.1"
isp1_net="xx.0.5.0/28"
isp1_if="eth2"
isp2_ip="xx.182.19.88"
isp2_gw="xx.182.19.1"
isp2_net="xx.182.19.0/28"
isp2_if="eth3"
lo_ip="127.0.0.1"
lo_if="lo"
lo_net="127.0.0.1/8"
ip rule delete
2007 May 14
13
Multihome load balancing - kernel vs netfilter
Hi,
I have searched the archives on the topic, and it seems that the list
gurus favor load balancing to be done in the kernel as opposed to other
means. I have been using a home-grown approach, which splits traffic
based on `-m statistic --mode random --probability X`, then CONNMARKs
the individual connections and the kernel happily routes them. I
understand that for > 2 links it will become
2007 Apr 11
3
2 isp in one server
Hi,
is it possible to have 2 different ISP in one server? i have 2 NIC cards im
going to config ISP1 in NIC1 and ISP2 in NIC2? what should be the
configuration for this setup?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos/attachments/20070412/4c62019f/attachment-0004.html>