extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2024-11-25 17:13:11 +01:00
Code Issues Packages Projects Releases Wiki Activity

Show equivalent mangle rules in the Multi-ISP article

Browse Source 
Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2014-02-27 15:58:51 -08:00
parent 238aa68b28
commit 1bac919ea6
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
docs/MultiISP.xml
View File

@ -148,7 +148,8 @@
two ISPs. Entries in <filename>/etc/shorewall/mangle</filename> and two ISPs. Entries in <filename>/etc/shorewall/mangle</filename> and
<filename>/etc/shorewall/rtrules</filename> can be used to direct <filename>/etc/shorewall/rtrules</filename> can be used to direct
particular outgoing connections to one ISP or the other. Use of particular outgoing connections to one ISP or the other. Use of
<filename>/etc/shorewall/tcrules</filename> is not required for <filename>/etc/shorewall/mangle</filename> (or
<filename>/etc/shorewall/tcrules</filename>) is not required for
<filename>/etc/shorewall/providers</filename> to work, but in most <filename>/etc/shorewall/providers</filename> to work, but in most
cases, you must select a unique MARK value for each provider so cases, you must select a unique MARK value for each provider so
Shorewall can set up the correct marking rules for you.</para> Shorewall can set up the correct marking rules for you.</para>
@ -2518,6 +2519,14 @@ MARK(2) $FW 0.0.0.0/0 tcp 119</programlistin
</listitem> </listitem>
</itemizedlist> </itemizedlist>
<para>The same rules converted to use the mangle file are:</para>
<programlisting>#ACTION SOURCE DEST PROTO PORT(S) CLIENT USER TEST LENGTH TOS CONNBYTES HELPER
# PORT(S)
MARK(2) $FW 0.0.0.0/0 tcp 21
MARK(2) $FW 0.0.0.0/0 tcp - - - - - - - ftp
MARK(2) $FW 0.0.0.0/0 tcp 119</programlisting>
<para>The remaining files are for a rather standard two-interface config <para>The remaining files are for a rather standard two-interface config
with a bridge as the local interface.</para> with a bridge as the local interface.</para>