similar to: DHCP Handling and Traffic Control over a Working Load Balanced Dual ISP Setup

Hello newsgroup, I hope somebody with more routing experience then me can help me with the problem I have. The setup is as described below. A dual internet provider routing, multiple local area networks, and a dmz network with one public and one private ip range. I followed the instructions at lartc.org, and so far everything is working. The default route is via

Hi all, i''m puzzled by a ploblem and I don''t know how to debug it... I have a firewall with 2 gateways, adsl and isdn. Main gateway is via adsl, backup via isdn. I setup 2 table ''adsl'' and ''isdn''. You can find a description below. I made a script to test both tables. That mainly 1. adds an iptables -t mangle -A

I know this is a FAQ and that it''s been discussed much before, I''m just looking for a few key things. I need to setup our gateway so that traffic FROM a range of IPs is sent out, masqueraded, via a new cable connection. I''m running 2.6.9. Am I going to require any of the CONNMARK patches or other patches from http://www.ssi.bg/~ja/#routes? I''m really not sure

I have two ISP connections, and am having some issues. I can connect to any services on the firewall, like the smtp gateway, but anything on the internal server only works from one connection. The lartc guide has a good example for what to do for services on the box, but leaves it open for how to handle services on an internal host. I''ve tried using iptables to mark the packets

Hi, Before I delve into trying to get this to work I was wondering if anyone had any suggestions. I was thinking of pinging the next-hop after our routers(ie the ISPs routers) and checking to see if the connection is down. If that is the case then updating the ip routes to not use that connection until it is fixed. Also flushing the connection tables for the routing so as the remembered routes

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear all, I am trying to setup a replicated volume to serve (in a load-balanced setup) static content. Since we are talking about small sized files (thumbnails) that do not take too much space, one ideea is to set that up in RAM (using /dev/shm mountpoint on CentOS). The main problem is that if I define a replicated volume using glusterfs, and I

I''m trying to connect to two ISPs the connections are as follows: Eth0 IP: 192.168.1.1 Mask: 255.255.255.0 Eth1 IP: 216.167.217.241 Mask: 255.255.255.0 Eth2 IP: 216.167.208.40 Mask: 255.255.255.0 Here are the commands to set things up: #Load modules insmod /lib/modules/2.6.19.2- pyramid.metrix.net/kernel/net/ipv4/multipath_drr.ko insmod /lib/modules/2.6.19.2-

Below is a snippet from my firewall script isp1_ip="xx.0.5.20" isp1_gw="xx.0.5.1" isp1_net="xx.0.5.0/28" isp1_if="eth2" isp2_ip="xx.182.19.88" isp2_gw="xx.182.19.1" isp2_net="xx.182.19.0/28" isp2_if="eth3" lo_ip="127.0.0.1" lo_if="lo" lo_net="127.0.0.1/8"

Below is a snippet from my firewall script isp1_ip="xx.0.5.20" isp1_gw="xx.0.5.1" isp1_net="xx.0.5.0/28" isp1_if="eth2" isp2_ip="xx.182.19.88" isp2_gw="xx.182.19.1" isp2_net="xx.182.19.0/28" isp2_if="eth3" lo_ip="127.0.0.1" lo_if="lo" lo_net="127.0.0.1/8" ip rule delete

Attempting to setup a dual ISP on a gentoo box but I''m not sure how to configure the routing in the /etc/conf.d/net configuration file. Does shorewall do all the routing or do I set just the default route to the PRIMARY outbound ISP? Vernon ------------------------------------------------------------------------- SF.Net email is sponsored by: Check out the new SourceForge.net

hi all, i have this situation: isp1 | dmz ----- FW linux ----- isp2 |----------------------------------- vpn concentrator ----- various ipsec lan-2-lan | LAN In lan i have "pc zone" and "server zone", same network. Dmz and server zone browse internet through isp1, lan use isp2, and remote

Hi to all For is just az concept question : There are a need to change something in Squid3 config when it are running in the same box as shorewall with 2 ISP ? I''ve been thinking in do this at home, as a proof of concept for future implememtations ... I allways use Roberto''s Debian package to implement Shorewall . Fábio Rabelo

Hello, I started off by reading the Linux Advanced Routing & Traffic Control Howto, then searched a bit around the web. I see many documents discussing these matters with kernel 2.2.x but they are quite old, something around 1998-2000. I have some questions but I might as well start by exposing my setup to clarify things. I have a couple of internet links: a leased line of 256kbit/s and an

Hi All We have setup a Centos7 host server with KVM and have created multiple VM running Ubuntu 14.04 using virt-manager. All VMs are having forward mode as "NAT" and using internal DHCP IP address 192.168.122.x series and we gave them fixed ips based on their mac address. Now all these VMs are able to access Internet and able to run update on all these guest OS. But these VMs are web

I''m currently building a firewall for a network with 2 ISP links. Unfortunately, one of the ISP''s doesn''t support BGP yet, otherwise I would be doing load balancing at the router, instead of the firewall. I''ve been trying to find information on how to get WonderShaper working, but everything I''ve found talks about setting it up for a firewall with one

Hello. I'm in need of some help to shed some light on a strange problem. The box is running Samba 4.1.7 on FreeBSD 9.2/amd64 and I suspect (though I'm not sure) all troubles started after the upgrade from 4.1.6. The setup is quite simple: no AD, no LDAP, only one server. A command as simple as "smbclient -U user //SERVER/SHARE", if fired up several times in a row on the

I think we discussed this in the past and I floated a hack at the time, but I don''t recall any real resolution. I want to see if time has solved my problem or if it still exists. My scenario is that I have two ISPs, one of which uses DHCP. Because I have two ISPs, history has shown that allowing the provisioning script for the interface to plumb a default route is troublesome and

I''m using Shorewall with a load-balanced muti-ISP config along with LSM for failover. It''s working great, except for DNS requests. I''d appreciate some advice on how to best configure this. The WAN connections are a T1 through XO and a cable connection through Comcast. About 80% of the traffic is routed out the Comcast connection under normal connections. I would

I recently couldn't connect to a windowXP domain share from a winXP client.(Samba is the PDC) When I attempted to mount the share from the samba server this is the error I got. colin@Alfalfa:~/oakwood$ smbmount //buckwheat/share buckwheat/ Password: 6586: tree connect failed: ERRDOS - ERRnomem (Insufficient server memory to perform the requested function.) colin@Alfalfa:~/oakwood$ smbmount

Although we (the authors of tinc) have done our best to make tinc as secure as possible, an unfortunate combination of encryption and key exchange techniques has created a hole in at least all versions of tinc >= 0.3, including the current CVS version. Exploit: If somebody can intercept the meta protocol to a host that is running a tinc daemon, it is possible to decrypt the passphrase, which