eth0 is connected to cable router, sets fixed IP (192.168.1.30), it's used for internal LAN and for desktop applications, browsing...
eth1 is connected directly to another ISP in bridge mode, so it can get an external IP and should be used for lxc to serve (web, torrents, etc) in various containers.
route -n shows:
Dest Gateway Genmask Iface 0.0.0.0 192.168.1.1 0.0.0.0 eth0 192.168.1.0 0.0.0.0 255.255.255.0 eth0 80.9.9.0 0.0.0.0 255.255.0.0 eth1 When I do: dhclient eth1, my Slackware system adds a second default route, now for eth1, and it's not possible to connect to the Internet. So I remove it, right?
In /etc/lxc/default.conf:
lxc.network.type = veth lxc.network.link = br0 lxc.network.flags = up In one of the lxc containers (/var/lib/lxc/alpine/config):
lxc.network.type = veth lxc.network.link = br0 lxc.network.flags = up So, that the container gets the external IP of the second ISP.
Added these rules to the firewall for transmission:
iptables -A INPUT -i eth1 -m state --state RELATED,ESTABLISHED -p udp --dport 51413 -j ACCEPT iptables -A INPUT -i eth1 -m state --state RELATED,ESTABLISHED -p tcp --dport 9091 -j ACCEPT iptables -A OUTPUT -o eth1 -p udp --sport 51413 -j ACCEPT I have some questions:
what is the right route setup?
What is wrong so that it's not possible to connect to the container from the Internet?
Is this bridged mode the best one to have some containers sharing the eth1 connection? If other, how to?
