similar to: two providers

many many thanks for ur help ok i m making my problem more clear... my LAN ip is :172.16.100.0/24 ip of eth1 is :202.51.78.122 and this is fixed and permanent address and it has no netmask and gateway(so, to provide internet to my LAN i have used the ppp0 for this connection ) ip of eth2 : 203.78.165.154; netmask:255.255.255.248; gateway:203.78.165.153 for eth0 my

Hello Shorewall list, I''m a happy Shorewall user since a few years now and everything works fine for me except one thing that I try to implement since a week, the multi-isp. I''ve downloaded the 2.4.0 Stable release yesterday and tried the RC2 since a week. My config is a Debian running a kernel 2.4.27 home made with the CONNMARK.diff patch applied I''m using 2 ISP,

Hi... I have installed ip route 2 package on Linux kernel 2.4.25 I am using 2 tables: ################################### ebox:100.254~# ip route list table ALTER default via 192.168.100.253 dev br0 ebox:100.254~# ip route list table main 10.0.0.254 dev ppp0 proto kernel scope link src 10.0.0.1 192.168.100.0/24 dev br0 proto kernel scope link src 192.168.100.254 192.168.100.0/24 dev

Cristian and Alex, Both of you have asked about this. A routing table can only have one default route so when the second link comes up, adding the second default route will fail. So in general, Shorewall can only reliably detect the gateway for P-T-P connections which is what the CVS current code does. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \

Hello newsgroup, I hope somebody with more routing experience then me can help me with the problem I have. The setup is as described below. A dual internet provider routing, multiple local area networks, and a dmz network with one public and one private ip range. I followed the instructions at lartc.org, and so far everything is working. The default route is via

Hi all, I have the following configuration: _______ +------------+ / diginet link | | | +-------------+ Provider 1 +------- __ | | | / ___/ \_

Hí everybody, you have a nice day. I am configuring accounting in shorewall /etc/shorewall/accounting and the traffic between eth0 (local network)1, eth2(local network2) and eth3(local network3) <--> eth1(ip public network), works fine. I make the accounting because y want to control the remote vpn access(pptpd) throught shorewall. Which is the way to control vpn /ip/access in

>> No I am using the EN5861, just that we have two ADSL lines and only >> one >> EN5861 and rather than buying another I''d like to use linux to do the >> same job as the en5861, if you know what I mean. > >You can, but since you have two ADSL lines, you''ll need two ADSL devices of some kind, whether it''s a pair of 5861s, or a 5861 and an

>>eth1 & eth2 are both connected to the EN5861 router. I''ve done that >>because I couldn''t work out any other way to use the static IP address >>that out ISP have given us. >> > >Aha, this is a config question. You can just add as many ip addresses to each physical card as you like. I forget the exact syntax, but check man pages for

I try to shape traffic using HTB and mark packets within iptables using PREROUTING. But the filterrules seems to ignore the marks set with PREROUTING Only POSTROUTING marks are accepted. First my configuration I have a router connected to the internet via ADSL over interface ppp0. eth0 is a tunnel to ppp0 and eth1 serves the LAN. LAN is 192.168.57.0/24 on 10Mbit ppp0 is 80.126.16.44 on

Having a problem with the 3 interface setup. I can get DMZ hosts, and FW to see internet, but anything on LOC interface is unable to get out. My first post to the list didn''t have the information needed, sorry for that, but thank you for pointing me to more resources. I''ve looked at the problem myself some more, but am still stuck. Shorewall Version: 2.2.1 ip addr show 1:

Hi, my company have just bought new network and I have question about one problem. As in topic we must use few completely different dsl''s and balance traffic between them. 2M/0,5M 4Mb/0,5M 8M/0,5M M=Mb/s I''ve never done such thing before so I have doubts how it will work. If the links are symmetric 2/2 4/4 8/8 there is no problem because with weights I can compensate the

Okay, here''s the deal, (diagram below) I currently have 3 NIC''s configured in my Linux server. eth0 serving the home network eth2 Cable modem to internet ppp0 ADSL to internet (through eth1) Connections can be established from eth0 (192.168.0.0/255) and from eth2 (24.250.85.128/128). Because eth2 has the first default route. However, ppp0

Hi, We have a 256 kbits/s (kilobits per second) link to the internet. it is a router running Linux that belongs to our ISP. They have given us 8 internet ips. (i.e- subnet is 255.255.255.248). one has been given to this router. I have given another internet ip to the firewall running CentOS 4.5. iptables is running on it. And also, I have installed iproute2 pkg as well. pls see below for

Hello guys, I have two ISP's connected to my router. One via eth2, second one via ADSL modem, with ppoe doing on my Centos 5 . The problem I have is, that when ADSL fails , interface ppp0 is removed. This also removes my static routes configured for this interface. I do not want that, as I have load balancing configured and default route is removed when ppp0 interface disapears. This is my

I have been successfully implementing load balancing gateways for multiple ISP links at various locations using Julian''s patches and as suggested in LARTC HowTo. At one location, one of the ISPs is providing connectivity through a PPOE DSL link which has to be dialled in everytime to connect. The gateway has been configured on a Fedora Core 3 based system and I have recompiled the

Hello Mailinglist, please excuse my bad english - but I am not a native speaker. My Network looks like this: Internet --- dyn. IP --- Firewall (shorewall) --- LAN (192.168.X.X) No I try to connect my iphone (from mobile Internet G3) over VPN (l2tp/ipsec) with the firewall. But I can´t open the necessary Port 1701. /var/log/syslog ... Dec 30 00:24:29 router kernel: [226128.293757]

Hi, I am running squid as a TRANSEPARENT PROXY WITH SQUID 2.5 on CENTOS 4.5. Pls see below for squid.con file. http_port 3128 cache_mem 64 MB cache_dir ufs /var/spool/squid 100 16 256 cache_access_log /var/log/squid/access.log cache_log /var/log/squid/cache.log cache_store_log /var/log/squid/store.log # INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS # Example rule

Hello Tom, I''ve been using Shorewall for years without problems. My previous version of shorewall was 1.4.6b-1. Everything worked just fine. Today I upgraded using rpm to 2.0.8-1. After update no one can connect to any interface from net. Server can connect to outside world fine and those described in routestopped have no problem connecting. Any help correcting this problem would be

Hi all iam trying to deploy loadbalance and failover My setup description --Fedora Core 4 --Linux 2.6.12.3 #1 SMP Mon Jul 25 22:37:34 IST 2005 i686 i686 i386 GNU/Linux --tc utility, iproute2-ss050314 --ip utility, iproute2-ss050314 --iptables v1.3.0 And i had deployed Following configuration #table main with priority 50, the highest one ip rule add prio 50 table main #table 201 ip rule add