shorewall6-route_rules
5
route_rules
Shorewall6 Routing Rules file
/etc/shorewall6/route_rules
Description
Entries in this file cause traffic to be routed to one of the
providers listed in shorewall6-providers(5).
The columns in the file are as follows.
SOURCE (Optional) - {-|interface|address|interface:<address>}
An ip address (network or host) that
matches the source IP address in a packet. May also be specified as
an interface name optionally followed by ":"
and an address. If the device lo is
specified, the packet must originate from the firewall
itself.
DEST (Optional) - {-|address}
An ip address (network or host) that matches the destination
IP address in a packet.
If you choose to omit either SOURCE or DEST, place "-" in that column. Note that you
may not omit both SOURCE and
DEST.
PROVIDER -
{provider-name|provider-number|main}
The provider to route the traffic through. May be expressed
either as the provider name or the provider number. May also be
main or 254 for the main routing
table. This can be used in combination with VPN tunnels, see example
2 below.
PRIORITY -
priority
The rule's numeric priority which
determines the order in which the rules are processed. Rules with
equal priority are applied in the order in which they appear in the
file.
1000-1999
Before Shorewall6-generated 'MARK' rules
11000-11999
After 'MARK' rules but before Shorewall6-generated rules
for ISP interfaces.
26000-26999
After ISP interface rules but before 'default'
rule.
Examples
Example 1:
You want all traffic coming in on eth1 to be routed to the
ISP1 provider.
#SOURCE DEST PROVIDER PRIORITY
eth1 - ISP1 1000
FILES
/etc/shorewall6/route_rules
See ALSO
http://shorewall.net/MultiISP.html
shorewall6(8), shorewall6-accounting(5), shorewall6-actions(5),
shorewall6-blacklist(5), shorewall6-hosts(5), shorewall6-interfaces(5),
shorewall6-maclist(5), shorewall6-params(5), shorewall6-policy(5),
shorewall6-providers(5), shorewall6-routestopped(5), shorewall6-rules(5),
shorewall6.conf(5), shorewall6-secmarks(5), shorewall6-tcclasses(5), shorewall6-tcdevices(5),
shorewall6-tcrules(5), shorewall6-tos(5), shorewall6-tunnels(5),
shorewall6-zones(5)