From ffe74cda544586f298533d939a7f6aefd54a7cf1 Mon Sep 17 00:00:00 2001 From: teastep Date: Wed, 17 Jan 2007 20:47:00 +0000 Subject: [PATCH] Update Multi-ISP doc for 3.4 git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5247 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb --- docs/MultiISP.xml | 25 +++++++++++++++++-------- 1 file changed, 17 insertions(+), 8 deletions(-) diff --git a/docs/MultiISP.xml b/docs/MultiISP.xml index 216d12f7c..ffd49fa1d 100644 --- a/docs/MultiISP.xml +++ b/docs/MultiISP.xml @@ -91,6 +91,13 @@ shorewall restart). Ideally, restarting the packet filter should have no effect on routing. + + + Prior to Shorewall 3.4.0, the routes and route rules added by + this support were not completely removed during shorewall + stop, shorewall clear or + shorewall restart. +
@@ -142,7 +149,7 @@ Shorewall will set up the routing and will update the /etc/iproute2/rt_tables to include the table names - and number of the tables that it adds. + and numbers of the tables that it adds. This feature uses packet @@ -488,15 +495,17 @@ particular provider then you must mark that traffic with the provider's MARK value in /etc/shorewall/tcrules and you must do that marking - in the PREROUTING chain. + in the PREROUTING chain; or, you must provide the appropriate rules in + /etc/shorewall/route_rules. - Entries in /etc/shorewall/providers - permanently alter your firewall/gateway's routing; that is, the effect - of these changes is not reversed by shorewall stop - or shorewall clear. To restore routing to its - original state, you may have to restart your network. This can usually - be done by /etc/init.d/network restart or + If you are running a Shorewall version prior to 3.4.0, entries + in /etc/shorewall/providers permanently alter + your firewall/gateway's routing; that is, the effect of these changes + is not reversed by shorewall stop or + shorewall clear. To restore routing to its original + state, you may have to restart your network. This can usually be done + by /etc/init.d/network restart or /etc/init.d/networking restart. Check your distribution's networking documentation.