From owner-freebsd-isp Thu Feb 12 07:49:42 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA11927 for freebsd-isp-outgoing; Thu, 12 Feb 1998 07:49:42 -0800 (PST) (envelope-from owner-freebsd-isp@FreeBSD.ORG) Received: from mercury.jorsm.com (mercury.jorsm.com [207.112.128.9]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id HAA11904 for ; Thu, 12 Feb 1998 07:49:37 -0800 (PST) (envelope-from jeff@mercury.jorsm.com) Received: from localhost (jeff@localhost) by mercury.jorsm.com (8.8.7/8.8.7) with SMTP id JAA14107 for ; Thu, 12 Feb 1998 09:49:35 -0600 (CST) Date: Thu, 12 Feb 1998 09:49:34 -0600 (CST) From: Jeff Lynch Reply-To: Jeff Lynch To: freebsd-isp@FreeBSD.ORG Subject: Re: FreeBSD firewall questions In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 12 Feb 1998, Cliff Addy wrote: > The firewall machine is named odo, the router is wormhole, and my test > server is tribble. All I did (in the brief experiment I tried) was to tell > odo his default route is wormhole. Then I changed tribble's default route > from wormhole to odo. Now, running a traceroute to freebsd.org, I get [snip] > > My one concern is: what if odo dies? Can I set up the other FreeBSD > machines to "fallback" to wormhole if odo cannot be contacted? On tribble from cron: #!/bin/sh loss=` /sbin/ping -c2 -q mercury | grep "packet loss" | awk '{print $7}' | tr -d '%'` if [ $loss -gt 0 ] then route delete wormhole route add default 206.181.190.29 fi Putting the routing back in when wormhole comes back is left as an exercise to the reader. ========================================================================= Jeffrey A. Lynch, President JORSM Internet email: jeff@jorsm.com Northwest Indiana's Full-Service Provider Voice: (219)322-2180 927 Sheffield Avenue, Dyer, IN 46311 Autoresponse: info@jorsm.com http://www.jorsm.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message