lstein / Net-ISP-Balance

Set of scripts to load-balance your Internet connection across two or more ISPs with auto failover
Artistic License 2.0
209 stars 49 forks source link

add_route with masquerading gets cleared #30

Open mastershadow opened 5 years ago

mastershadow commented 5 years ago

Hello and thank you for your work!

The documentation at point ...Allow machines on the LAN to access the control interface of a cable and/or DSL modem attached to the router? states: Create the file /etc/network/balance/routes/01.modem_route.pl containing the following: $B->add_route('192.168.1.1/32'=>'eth2',1);

Unfortunately doing this add rules for both ip route and iptables before iptables initialization, so rules are cleared out with the result of working routing but broken firewall rules. This also applies to local routes. I've managed to circumvent the problem by manually run a script on post-run.

I think it could be great to move both ip route and iptables initialization just after pre-run as it could solve all these problems imo. What do you think?

Have a nice day, Eduard Roccatello

anoduck commented 3 years ago

Please forgive my ignorance, but would not installation of iptables-persistent resolve this problem?

I experienced a similar situation where load_balance.pl failed to start on boot. (For some unknown reason, Debian was being difficult that day). Which resulted in the entire network being down and the host running load_balance.pl unreachable. By installing iptables_persistent, this prevented the situation from occurring.