Re: [Shorewall-users] Multi-ISP - problems learning the ropes...

[Ed W <li...@wi...>]

On 19/08/2011 17:45, Tom Eastep wrote:
> On Fri, 2011-08-19 at 16:56 +0100, Ed W wrote:
>> Tom, any chance of some pointers on the second question (below)
> Look in /var/lib/shorewall/firewall. There is a function named
> interface_is_usable() that is executed to determine if an interface is
> usable or not.

Hmm, if I change the function like so:

interface_is_usable() # $1 = interface
{                                                                              

    [ "$1" = lo ] && return 0                            
    interface_is_up $1 && [ "$(find_first_interface_address_if_any $1)"
!= 0.0.0.0 ] && run_isusable_exit $1 && echo "interface is usable: $1"
    interface_is_up $1 && [ "$(find_first_interface_address_if_any $1)"
!= 0.0.0.0 ] && run_isusable_exit $1
}      

Then run shorewall start I get:

$ shorewall start
[ -f /var/lib/shorewall/firewall ]
Starting Shorewall....
interface is usable: ppp1
Initializing...
Processing /etc/shorewall/init ...
Command: start
Processing /etc/shorewall/tcclear ...
Setting up Route Filtering...
Setting up Martian Logging...
Setting up Proxy ARP...
Adding Providers...
interface is usable: eth0
interface is usable: wlan1
   WARNING: Interface ppp0 is not usable -- Provider pppp0 (11) not Added
   WARNING: Interface ppp1 is not usable -- Provider pppp1 (12) not Added
Setting up Traffic Control...
Preparing iptables-restore input...
Running /sbin/iptables-restore...
IPv4 Forwarding Enabled
Processing /etc/shorewall/start ...
Processing /etc/shorewall/started ...
done.


If I check /var/lib/shorewall/firewall I see that the "not Added" comes
from an "if" here:

  if [ -n "$SW_PPP1_IS_USABLE" ]; then
...
 else                                              
   error_message "WARNING: Interface ppp1 is not usable -- Provider
pppp1 (12) not Added"
 fi 


I can't see any other reference to "$SW_PPP1_IS_USABLE"?   The if for
eth0/wlan1 both use interface_is_usable, only the ppp1 statements are
different?

This is shorewall 4.4.22.1

Thanks for any thoughts?

Ed W