similar to: Outcoming request with two ISP

On Thu, 10 Jul 2003 09:09:39 -0300, Vivian Ballan <vballan@hotmail.com> wrote: > I have a firewall Shorewall 1.4.5 running with Suse 7.2(kernel 2.4.20) > and 4 nic (2 net, 1 dmz, 1 loc). > > I need to manage all outcoming request to any ISP in balanced mode or, I > want to select one ISP or other (manage the way), too. > > Please, how do I do ? > Follow the

[This email is either empty or too large to be displayed at this time]

I think I''ve figured out the routing for multiple ISP''s and DNAT. For ths who might be interesed, I''ve uploaded some notes to: http://www.heronforge.net/redhat/node17.html Let me know of you see any errors or a better way... -- Stephen Carville <stephen@totalflood.com> Unix and Network Admin Nationwide Totalflood 6033 W. Century Blvd Los Angeles, CA 90045

Hello all. First of all, please be a bit indulgent to my poor English :-). Second, this message is "kinda" BIG, so if you don''t like BIG messages, simply don''t read it :-). I''ve read http://shorewall.net/2.0/Shorewall_and_Routing.html and http://shorewall.net/MultiISP.html, however I still a bit confused how to organize what I need :-). I''ve a

Remember that when a network interface goes down, the kernel automatically deletes all routes through that interface. That includes routes in alternate routing tables that Shorewall has added as part of the multi-ISP feature. Bottom line: Shorewall must be restarted if any interface specified in the /etc/shorewall/providers file goes down then comes back up. -Tom -- Tom Eastep \ Nothing is

Hi, I currently connect to my ISP via my adsl modem in bridge mode and PPPoE. I am due to put a second PPPoE ISP onto my firewall box which will give me ppp0 (general) and ppp1 (static leased line). The static leased line will run a number of services on its static IP and it is therefore imperative to make sure rules defined for the static line are assigned to the correct interface. I need this to

I''m using Shorewall with a load-balanced muti-ISP config along with LSM for failover. It''s working great, except for DNS requests. I''d appreciate some advice on how to best configure this. The WAN connections are a T1 through XO and a cable connection through Comcast. About 80% of the traffic is routed out the Comcast connection under normal connections. I would

>From http://shorewall.net/ProxyARP.htm (and the Setup Guide): > A word of warning is in order here. ISPs typically configure their > routers with a long ARP cache timeout. If you move a system from > parallel to your firewall to behind your firewall with Proxy ARP, it > will probably be HOURS before that system can communicate with the > internet. You can call your ISP and ask

Attempting to setup a dual ISP on a gentoo box but I''m not sure how to configure the routing in the /etc/conf.d/net configuration file. Does shorewall do all the routing or do I set just the default route to the PRIMARY outbound ISP? Vernon ------------------------------------------------------------------------- SF.Net email is sponsored by: Check out the new SourceForge.net

Hi, I have 2 internet nic''s with differents ISPs. eth0 = isp1 eth3 = isp2 My internal network is eth1 # /etc/interfaces net eth0 detect routefilter,norfc1918,blacklist net eth3 detect routefilter,norfc1918,blacklist loc eth1 detect # /etc/policy loc net ACCEPT net net DROP

Hi everyone. We are putting together a network appliance for emergency management use, and it has to be adaptable to different network connections. eth0 is a connection to whatever physical ethernet is available on site, if any, including satellite. ppp0 is a 3G modem connection, if available br0 is the internal network supporting IAX2, SIP, general internet use and video monitoring, over eth1

Hi to all For is just az concept question : There are a need to change something in Squid3 config when it are running in the same box as shorewall with 2 ISP ? I''ve been thinking in do this at home, as a proof of concept for future implememtations ... I allways use Roberto''s Debian package to implement Shorewall . Fábio Rabelo

Dear all, I have a multi-isp setup using DSL and leased line config for my firewall box using shorewall version 4.0.13. Clients behind the router can connect to the net without problem, they are always routed via the DSL (BusinessOne) provider. The problem i am having is that sometimes when the firewall tries to connect to the internet the connections time out (apt-get update, ping,

Why ping google ??? you should either ping your assigned external ip address ( make your config dhcp for your external ip address even if it is static ) ( If your dsl link is up you sould have an address if not you should not ) If for some reson you cannot do that, ping your isp''s default gw or someone closer. With google you never know what is going on. I do something similar with -m

Hi, I'm using IPSEC in a multi-ISP configuration, lsm 0.131, Kernel 2.6.32, ipsec-tools 0.8.0 This worked fine with Shorewall/Shorewall-Lite 4.5.7. After updating Shorewall to 4.5.8 the routing of ESP packets doesn't work. If I change the Providers.pm file and add connmark => "! --mark 0/$mask" like before in Shorewall 4.5.7 than everything works fine. add_ijump

Hi all, I'm currently getting my Centos working as a proxy (squid) on a 2 Mb bandwidth plan that's serving 20 users. it's all good though our need for speed is increasing by the day. soon enough i'll be serving up to 60 user, hence the need to get higher bandwidth though here where the problem is. as i'm using HDSL, 2 Mb is the highest plan available. hence, i need

I have a multi-isp configuration: CGCO 1 256 main $CGCOIF detect track,balance br-lan,tun0 IGS 2 512 main $IGSIF detect track,fallback br-lan,tun0 where I force SMTP out one of the connections: 512:P br-lan - tcp 25 But the effect of that of course is that if IGS goes down, SMTP will leak out of the CGCO connection. How can I prevent that? Cheers, b.

I''m planning a multi isp setup and cafully read the documentation. One thing that bothers me is the masq file. The example uses a single ip address on each public interface. I have multiple addresses on both public interfaces (16 on one and 64 on the other). I''m a bit confused about what to put in the masq file in this situation. Any insights would be appreciated. Ronald --

Hi, I''m seeking advice for the following setup. Shorewall 2.2.2, debian/sarge on Soekris net4501 boards. We have two ISP feeds (let''s call them ISP-1 and ISP-2) and get 8 static IPs with each feed. The plan is to have the publicly accessible servers sitting in the DMZ connected to ISP-1. Our local intranet (LOC) will be connected to ISP-2. There will be 3 firewall/routers: fw1

I know this is a FAQ and that it''s been discussed much before, I''m just looking for a few key things. I need to setup our gateway so that traffic FROM a range of IPs is sent out, masqueraded, via a new cable connection. I''m running 2.6.9. Am I going to require any of the CONNMARK patches or other patches from http://www.ssi.bg/~ja/#routes? I''m really not sure