Comments on: Sysadmin: Multiple ISP firewall – The setup

By: Devil h2o

Devil h2o — Mon, 02 Jul 2012 05:47:58 +0000

Thank you very much, you've saved my life... I was getting a NATting error since my configuration load balances 3 modems from the same ISP... you should definitely use the providers (even though i am using a single provider) and the route_rules files.

By: Flash

Flash — Sat, 24 Dec 2011 11:03:33 +0000

After spending weeks reading about openvpn implementation, I am thankful for a clear and very helpful guide. I was wondering if there's plan for followon which will give a newbie like me hints to troubleshoot routing issue. Again, thanks.

By: Yezid Mendoza

Yezid Mendoza — Thu, 08 Dec 2011 20:52:24 +0000

It was a very helpfully guide. Thanks a lot!!! I hope to post the last 3 lines of the objectives as soon as possible.

By: G Sathish

G Sathish — Tue, 18 Oct 2011 05:32:04 +0000

I don't find this much explanation anywhere. You explained briefly. Great explanation.Thank you

By: anil

anil — Fri, 30 Sep 2011 19:49:12 +0000

Really its very nice article, we develop our firewall using shorewall for single ISP Support, Right Now try shifted on multiple ISP support so we need your help if facing any issue

Thanks,

By: Joerg Hanebuth

Joerg Hanebuth — Mon, 22 Aug 2011 10:38:26 +0000

thanx alot. nice article!

By: jon

jon — Sat, 01 Jan 2011 16:57:33 +0000

great article. much appreciated.

By: Renaud

Renaud — Sat, 15 May 2010 01:50:46 +0000

@Ismael. Sorry for belated reply.
Regarding automatic switch-over for multiple ISP I would recommend you read Shorewall and Multiple Internet Connections.

Regarding your second question, I'm doing just that: I have a Windows web server and a Linux web server behind the firewall.
Unfortunately, you cannot use shorewall for this as you need to send to request to the right server depending on the content of the HTTP request, not just the network packets.

Fortunately, there is a nice little tool that's easy to use and works really well: pound, a reverse web proxy and load balancer.
Just install it on the same machine as the firewall and allow it to receive all HTTP requests from port 80, it will dispatch them to the right server based on how you configure it.

By: Ismael

Ismael — Fri, 23 Apr 2010 14:15:08 +0000

Please help me out with

If one line fails, incoming traffic switches to the other line.

If one line fails, outgoing traffic switches to the other line.

Eventually, we want both the linux and win servers to be able to host different websites and we want the firewall to send incoming requests to the right server.

i need to set it up in my office all the methods has been success, however the remaining three steps is required for me, Your tutorial is very useful for people who cant afford more. Thanks for the hardwork

By: Ivo Rusev

Ivo Rusev — Mon, 22 Mar 2010 20:09:47 +0000

Thank you very much for the multi-isp router article. It really helped me a lot building one of my own. As a suggestion it will be really helpful if you post an article about traffic shaping with Shorewall. Again, 10x for the guide!

By: mitz

mitz — Wed, 18 Nov 2009 09:18:18 +0000

Thank you for this guide! Helped me out alot

By: Haresh

Haresh — Fri, 06 Nov 2009 10:43:14 +0000

Please help me out with

If one line fails, incoming traffic switches to the other line.

If one line fails, outgoing traffic switches to the other line.

Eventually, we want both the linux and win servers to be able to host different websites and we want the firewall to send incoming requests to the right server.

By: Dipendra Niraula

Dipendra Niraula — Thu, 01 Oct 2009 00:33:26 +0000

I like the article and am implementing it at my office. Things are not getting well. I am unable to share internet to LOC and DMZ. I configured separate DNS and try to use that but main problem is internet is not sharing to LOC and DMZ. Any one know the problem please share it. I will be more then happy.

Thanks.

By: Raghu Siddarth

Raghu Siddarth — Fri, 04 Sep 2009 16:18:14 +0000

Excellent Article!!

I've scoured the internet searching for a good load blanching and fail-over setup. Yours led me in the right track.

By: Ratnadeep Debnath

Ratnadeep Debnath — Mon, 03 Aug 2009 10:04:56 +0000

Very nice tutorial on the topic. Thanks :)

By: stefanomavilio.com » Blog Archive » Mutli-ISP firewall setup using shorewall and linux to create safe DMZ and LAN access. | Cypris’ lookout

Thu, 30 Jul 2009 15:24:17 +0000

[...] via Mutli-ISP firewall setup using shorewall and linux to create safe DMZ and LAN access. | Cypris’.... [...]

By: Miguel

Miguel — Fri, 29 May 2009 10:51:58 +0000

I am working just in the same configuration and your howto helped me so much to resolve some doubts. Thank very much for this howto.

By: Mateo Juanche

Mateo Juanche — Wed, 25 Feb 2009 21:14:07 +0000

I found your howto very usefull, thanx very much