holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Tweak FAQs 57 and 58

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@4516 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-09-04 16:23:21 +00:00
parent 4f86e7a0e2
commit 210be98cdc
1 changed files with 10 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
docs/FAQ.xml
View File

@ -1628,11 +1628,12 @@ iptables: Invalid argument
the second one, it doesn't work.</title> the second one, it doesn't work.</title>
<para><emphasis role="bold">Answer:</emphasis> The Multi-ISP <para><emphasis role="bold">Answer:</emphasis> The Multi-ISP
Documentation strongly recommends that you use the 'balance' option on Documentation strongly recommends that you use the <emphasis
all providers even if you want to manually specify which ISP to use. If role="bold">balance</emphasis> option on all providers even if you want
you don't do that so that your main routing table only has one default to manually specify which ISP to use. If you don't do that so that your
route, then you must disable route filtering. Do not specify the main routing table only has one default route, then you must disable
'routefilter' option on the other interface(s) in route filtering. Do not specify the <emphasis
role="bold">routefilter</emphasis> option on the other interface(s) in
<filename>/etc/shorewall/interfaces</filename> and disable any <filename>/etc/shorewall/interfaces</filename> and disable any
<emphasis>IP Address Spoofing</emphasis> protection that your <emphasis>IP Address Spoofing</emphasis> protection that your
distribution supplies.</para> distribution supplies.</para>
@ -1649,12 +1650,13 @@ iptables: Invalid argument
<filename>/etc/shorewall/tcrules</filename> file:</para> <filename>/etc/shorewall/tcrules</filename> file:</para>
<programlisting>#MARK SOURCE DEST <programlisting>#MARK SOURCE DEST
1 eth0 1:P eth0
1 $FW 1:P $FW
&lt;other MARK rules&gt;</programlisting> &lt;other MARK rules&gt;</programlisting>
<para>Now any traffic that isn't marked by one of your other MARK rules <para>Now any traffic that isn't marked by one of your other MARK rules
will have mark = 1 and will be sent via ISP1.</para> will have mark = 1 and will be sent via ISP1. That will work whether
<emphasis role="bold">balance</emphasis> is specified or not!</para>
</section> </section>
</section> </section>