I have 2 isp and I can´t reach web server in dmz by "ISP1".
It seems to be routing problem because when I change the default gateway,
it works and then I can´t reach it by "ISP2"
How can I resolve the problem ?
(I think that shorewall 3.2.9 doesn´t need extra rule/route by iproute2)
/etc/shorewall/zones
fw firewall
lan ipv4
dmz ipv4
inet ipv4
/etc/shorewall/interfaces
lan eth0 detect tcpflags
dmz eth1 detect tcpflags
inet eth2 detect tcpflags,blacklist,norfc1918,routefilter,nosmurfs
inet eth3 detect tcpflags,blacklist,norfc1918,routefilter,nosmurfs
/etc/shorewall/route_rules
eth2 - ISP1 1000
eth3 - ISP2 1000
/etc/shorewall/providers
ISP1 1 1 main eth2 200.41.28.225 track
eth0,eth1
ISP2 2 2 main eth3 200.43.134.254 track
eth0,eth1
/etc/shorewall/params
INET1_IP=200.41.28.229
INET2_IP=200.43.134.7
DMZ_SERVER1_IP=192.168.0.2
/etc/shorewall/rules
DNAT inet:eth2 dmz:$DMZ_SERVER1_IP:80 tcp http -
$INET1_IP
DNAT inet:eth3 dmz:$DMZ_SERVER1_IP:80 tcp http -
$INET2_IP
# uname -a
Linux fw 2.6.11-prep #1 Fri Jun 24 10:11:31 ART 2005 i686 athlon i386 GNU/Linux
# cat /etc/fedora-release
Fedora Core release 3 (Heidelberg)
# shorewall version
3.2.9 (shorewall-3.2.9-4.noarch.rpm)
Thanks in advance.
Leandro.
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
