From 7652794fe471dde228cb3a8e5c437df92500e4e1 Mon Sep 17 00:00:00 2001 From: teastep Date: Wed, 27 Jul 2005 00:12:11 +0000 Subject: [PATCH] Update routing document for 2.4.2 git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@2417 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- Shorewall-docs2/Shorewall_and_Routing.xml | 31 ++++++++++++++++++----- 1 file changed, 24 insertions(+), 7 deletions(-) diff --git a/Shorewall-docs2/Shorewall_and_Routing.xml b/Shorewall-docs2/Shorewall_and_Routing.xml index 731381cc4..d15168348 100644 --- a/Shorewall-docs2/Shorewall_and_Routing.xml +++ b/Shorewall-docs2/Shorewall_and_Routing.xml @@ -15,7 +15,7 @@ - 2005-07-11 + 2005-07-26 2005 @@ -207,11 +207,13 @@
- Multiple Internet Connection Support in Shorewall 2.3.2 and + <title>Multiple Internet Connection Support in Shorewall 2.4.2 and Later Beginning with Shorewall 2.3.2, support is included for multiple - internet connections. + internet connections. If you wish to use this feature, we recommend + strongly that you upgrade to version 2.4.2 or later. This section assumes + that you have so upgraded.
Overview @@ -417,6 +419,20 @@ + + + COPY + + + When you specify an existing table in the DUPLICATE + column, Shorewall copies all routes through the interface + specified in the INTERFACE column plus the interfaces listed in + this column. At a minumum, you should list all interfaces on + your firewall in this column except those internet interfaces + specified in the INTERFACE column of entries in this file. + + +
@@ -504,11 +520,12 @@ The configuration in the figure at the top of this section would be specified in /etc/shorewall/providers as - follows: + follows. Assume tht there is a single internal interface, eth2. - #NAME NUMBER MARK DUPLICATE INTERFACE GATEWAY OPTIONS -ISP1 1 1 main eth0 206.124.146.254 track,balance -ISP2 2 2 main eth1 130.252.99.254 track,balance + #NAME NUMBER MARK DUPLICATE INTERFACE GATEWAY OPTIONS COPY +ISP1 1 1 main eth0 206.124.146.254 track,balance eth2 +ISP2 2 2 main eth1 130.252.99.254 track,balance eth2 Other configuration files go something like this: