diff --git a/docs/MultiISP.xml b/docs/MultiISP.xml index cda333ce7..0c6b34034 100644 --- a/docs/MultiISP.xml +++ b/docs/MultiISP.xml @@ -750,8 +750,10 @@ eth1 0.0.0.0/0 130.252.99.27 Martians One problem that often arises with Multi-ISP configuration is - 'Martians'. If your Internet interfaces are configured with the - routefilter option in + 'Martians'. If you set ROUTE_FILTER=Yes in + /etc/shorewall/shorewall.conf or if your Internet + interfaces are configured with the routefilter option in /etc/shorewall/interfaces (remember that if you set that option, you should also select logmartians), then things may not work correctly @@ -810,6 +812,18 @@ DROP:info net:192.168.1.0/24 all Be sure the above rule is added before any other rules with net in the SOURCE column. + + + If you set ROUTE_FILTER=Yes in + /etc/shorewall/shorewall.conf, then setting + routefilter=0 in shorewall-interfaces + (5) will not disable route filtering on a given interface. You must + set ROUTE_FILTER=No in shorewall-interfaces + (5), then set the routefilter option + on those interfaces on which you want route filtering. +