[问题]电信和网通双线路怎样设置shorewall?

[yesilike]

我现在是用的有线电视宽带链接的eth0，服务器开了个web网站，只需开放80;22;25端口。

shorewall的配置如下：

interfaces:

#ZONE INTERFACE BROADCAST OPTIONS
net eth0
#LAST LINE -- DO NOT REMOVE

zones:

#ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS
fw firewall
net ipv4
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

policy:

fw net ACCEPT
net all DROP info
all all REJECT info

rules:

#tarGET SOURCE DEST PROTO DEST SOURCE RATE USER/
# PORT PORT(S) LIMIT GROUP

#Web
#ACTION SOURCE DESTINATION PROTO DEST PORT(S)
ACCEPT net $FW tcp 80

#ssh

ACCEPT net fw tcp 22

#email
ACCEPT net fw tcp 25

现在需要增加一条电信的ADSL线路，使用另一个网卡eth1。以上的配置应该怎样修改？

[yesilike]

我自己修改的配置，双网卡，有线用的网通线路，不用拨号; 电信是ADSL拨号。不知道有没有错误？麻烦高手指点！

interfaces:

#ZONE INTERFACE BROADCAST OPTIONS
net eth0 detect
net eth1 detect
net ppp0 detect
#LAST LINE -- DO NOT REMOVE

zones:

#ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS
fw firewall
net ipv4
loc ipv4
#LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

rules:

#tarGET SOURCE DEST PROTO DEST SOURCE RATE USER/
# PORT PORT(S) LIMIT GROUP



#Web
#ACTION SOURCE DESTINATION PROTO DEST PORT(S)
ACCEPT net $FW tcp 80

#ssh

ACCEPT net fw tcp 22


#email
ACCEPT net fw tcp 25

#LAST LINE -- DO NOT REMOVE

policy:

fw net ACCEPT
net all DROP info
all all REJECT info
#LAST LINE -- DO NOT REMOVE