diff --git a/Shorewall/Perl/Shorewall/Providers.pm b/Shorewall/Perl/Shorewall/Providers.pm index 71f0e4dba..d7932cebf 100644 --- a/Shorewall/Perl/Shorewall/Providers.pm +++ b/Shorewall/Perl/Shorewall/Providers.pm @@ -602,6 +602,7 @@ sub process_a_provider( $ ) { } elsif ( $option eq 'nohostroute' ) { $hostroute = 0; } elsif ( $option eq 'persistent' ) { + warning_message "When RESTORE_DEFAULT_ROUTE=Yes, the 'persistent' option may not work as expected" if $config{RESTORE_DEFAULT_ROUTE}; $persistent = 1; } else { fatal_error "Invalid option ($option)"; diff --git a/Shorewall/manpages/shorewall-providers.xml b/Shorewall/manpages/shorewall-providers.xml index 7b2da0553..d6fc26c92 100644 --- a/Shorewall/manpages/shorewall-providers.xml +++ b/Shorewall/manpages/shorewall-providers.xml @@ -220,7 +220,7 @@ In IPV6, the option does not cause balanced default routes to be created; it rather causes a sequence of default routes with different metrics - to be created. + to be created. @@ -438,6 +438,14 @@ enable and reenable commands can reenable the provider. + + + RESTORE_DEFAULT_OPTION=Yes in shorewall[6].conf is not + recommended when the option is + used, as restoring default routes to the main routing table + can prevent link status monitors such as foolsm from + correctly detecting non-working providers. +