From 7322db665a0c0e07a301ebc71455fabee69105ce Mon Sep 17 00:00:00 2001
From: teastep <teastep@fbd18981-670d-0410-9b5c-8dc0c1a9a2bb>
Date: Thu, 18 Dec 2008 00:55:37 +0000
Subject: [PATCH] Add KEEP_RT_TABLES to interoperability issues

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@9108 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
---
 docs/IPv6Support.xml | 39 +++++++++++++++++++++++++++++++++++++--
 1 file changed, 37 insertions(+), 2 deletions(-)

diff --git a/docs/IPv6Support.xml b/docs/IPv6Support.xml
index 0e349ae65..02da2b303 100644
--- a/docs/IPv6Support.xml
+++ b/docs/IPv6Support.xml
@@ -98,7 +98,7 @@
       family has no effect on the other address family.</para>
 
       <para>As a consequence, there is very little interaction between
-      Shorewall and Shorewall6. </para>
+      Shorewall and Shorewall6.</para>
 
       <section>
         <title>DISABLE_IPV6</title>
@@ -113,7 +113,7 @@
       <section>
         <title>TC_ENABLED</title>
 
-        <para>The other area where their configurations overlap is in traffic
+        <para>Another area where their configurations overlap is in traffic
         shaping; the <filename>tcdevices</filename> and tcclasses files do
         exactly the same thing in both Shorewall and Shorewall6. Consequently,
         you will have TC_ENABLED=Internal in Shorewall or in Shorewall6 and
@@ -134,6 +134,41 @@
           </listitem>
         </itemizedlist>
       </section>
+
+      <section>
+        <title>KEEP_RT_TABLES</title>
+
+        <para>Multi-ISP users will need to be aware of this one. When there
+        are entries in the providers file, Shorewall normally installs a
+        modified <filename>/etc/iproute2/rt_tables</filename> during
+        <command>shorewall start</command> and <command>shorewall
+        restart</command> and restores a default file during
+        <command>shorewall stop</command>. Setting KEEP_RT_TABLES=Yes in
+        <ulink url="manpages/shorewall.conf.html">shorewall.conf</ulink>(5)
+        stops Shorewall (Shorewall lite) from modifying
+        <filename>/etc/iproute2/rt_tables</filename>.</para>
+
+        <para>Shorewall6 is also capable of modifying
+        <filename>/etc/iproute2/rt_tables</filename> in a similar way.</para>
+
+        <para>Our recommendation to Multi-ISP users is to:</para>
+
+        <itemizedlist>
+          <listitem>
+            <para>Select the same names for similar providers.</para>
+          </listitem>
+
+          <listitem>
+            <para>Set KEEP_RT_TABLES=No in <ulink
+            url="manpages/shorewall.conf.html">shorewall.conf</ulink>(5) and
+            set KEEP_RT_TABLES=Yes in <ulink
+            url="manpages6/shorewall6.conf.html">shorewall6.conf</ulink>(5).</para>
+          </listitem>
+        </itemizedlist>
+
+        <para>These setting allow Shorewall to control the contents of
+        <filename>/etc/iproute2/rt_tables</filename>.</para>
+      </section>
     </section>
   </section>