diff --git a/docs/MultiISP.xml b/docs/MultiISP.xml index e0f45125b..82151be62 100644 --- a/docs/MultiISP.xml +++ b/docs/MultiISP.xml @@ -847,11 +847,9 @@ eth1 0.0.0.0/0 130.252.99.27 This continues the example in the preceding section. Now suppose that you want to route all outgoing SMTP traffic from - your local network through ISP 2. You would make this entry in /etc/shorewall/mangle (and if you are - running a version of Shorewall earlier than 3.0.0, you would set - TC_ENABLED=Yes in /etc/shorewall/shorewall.conf). + your local network through ISP 2. If you are running Shorewall 4.6.0 or + later, you would make this entry in /etc/shorewall/mangle. #ACTION SOURCE DEST PROTO PORT(S) CLIENT USER TEST # PORT(S) @@ -863,6 +861,21 @@ MARK(2):P <local network> 0.0.0.0/0 tcp 25#MARK SOURCE DEST PROTO PORT(S) CLIENT USER TEST # PORT(S) MARK(2) $FW 0.0.0.0/0 tcp 25 + + If you are running a Shorewall version earlier than 4.6.0, the + above rules in /etc/shorewall/tcrules + would be: + + #ACTION SOURCE DEST PROTO PORT(S) CLIENT USER TEST +# PORT(S) +2:P <local network> 0.0.0.0/0 tcp 25 + + And for traffic from the firewall: + + #MARK SOURCE DEST PROTO PORT(S) CLIENT USER TEST +# PORT(S) +2 $FW 0.0.0.0/0 tcp 25