heriyanto shell <[email protected]> wrote: > but i'am not going using one interface, i use multiple interface. > I try to bring in back config in providers file and add the new interface > (eth2) to zone, but when i do the restarting shorewall still get same error.
> > I get mulitple public IP from my ISP, so far i'am just using one, > > so i just put one eth in providers file. > > Last night i added new network interface I assign another IP that i > > get from my ISP > > then i try to modify/add config in providers file, then i get this > > error: As I read this, you do not need a providers file at all. What you need to do depends very heavily on how you get your IPs from the ISP - and for some combinations you will not be able to assign one of the IPs to a different interface. This is nothing to do with Shorewall, but is determined by basic IP addressing and routing. So, can you explain *exactly* what your ISP gives^H^H^H^H^Hsells you, IP address wise ? Combinations I've had : 1) The basic link (PPPoA or ethernet) gets an IP address, a further subnet (not including the link address) is provided which is routed over that link. This is good as the IP subnet can be used very flexibly. 2) An IP subnet is provided, but your endpoint has to use one of them as it's link address. Depending on the system this can make using the other IPs more restricted. Eg, with an ethernet interface, the ISP's equipment expects to be able to send ARP requests for each address and get an answer so you need to use Proxy-ARP (http://shorewall.net/ProxyARP.htm) if you don't want to just apply the subnet to the outside interface of your firewall/router (and add all the addresses as aliases). But with PPPo[A|E] the ISP just squirts the packets up the pipe and it's a lot easier to use the IPs on other interfaces. 3) A single IP for the link is provided, with further 'random' IPs provided. Again, it depends on the ISP's equipment as to how you can use these additional IPs. That's why we need to know *exactly* what you are being provided with in order to help. ------------------------------------------------------------------------------ Dive into the World of Parallel Programming! The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
