www.securityappraisers.net/downloads/routes.tar
[the MD5 signature is f834da2a393e9a918d8102c72f5e1340]
The script provides support for multiple gateways on multiple interfaces, and allows designation of the Internet 'route of last resort' for a particular gateway.
THIS VERSION SUPPORTS STATIC INTERFACE ADDRESSES ONLY (no DHCP, etc. -yet! Although if you know what you're doing, feel free to modify this script...)
Please visit www.securityappraisers.net/contact to get in touch with SecurityAppraisers as a voluntary beta for the interface addressing schema you need; no charge will be incurred for script implementations of standard interface configurations supported by Astaro; we can then repost it and everybody will benefit...
The script can be extracted to /sbin/init.d/routes.local (this is a 'hook' wisely provided by Astaro; a script in this location gets called whenever a change is made to the "Routes" or "Interfaces" pages in the webadmin).
Specify individual gateways for multiple interfaces; then add an "Any" route on the "Routes" page of the webadmin, specifying a target gateway outside an interface (as opposed to the address of an interface itself).
This script will:
- flush all prior routes (except loopback network 127.0.0.0)
- add routes for the network defined by each interface's address and mask (also specifying a gateway if one is specified on the interface; PLEASE don't specify a gateway of the interface address itself -this is probably not what you want to do...) [the interface that will support the route of last resort will not be specified as a subnetwork route, since the route of last resort should cover this...]
- add specific routes specified on the Routes webadmin page (based on networks that are not labeled "Any")
- add routes of last resort (0.0.0.0) for targets labeled "Any" [there should only be one "Any"/"route of last resort"; dead gateway is not supported in this script implementation...)
https://your_webadmin_url /routes.htm
This software is neither expressly endorsed nor supported by Astaro.
Although reasonable efforts of software quality assurance have been made, this free software implies no obligations of support or liability by SecurityAppraisers.
Trivial sanity checking of data is performed by this script; but routing and interface misconfigurations are NOT handled (e.g., two interfaces having the same address, or overlapping networks, etc.).
For extra details read the comments in the script...
