shorewall show routing

Shorewall 4.5.21.6 Routing at router - Sat Oct 25 23:16:09 UTC 2014

Routing Rules

0:      from all lookup local
10000:  from all fwmark 0x1/0xff lookup ISP
10001:  from all fwmark 0x2/0xff lookup TUN
20000:  from 192.168.0.2 lookup ISP
20000:  from 10.30.1.26 lookup TUN
32766:  from all lookup main
32767:  from all lookup default

Table default:

192.168.0.1 dev eth0 scope link
default via 192.168.0.1 dev eth0 src 192.168.0.2 metric 1

Table ISP:

192.168.0.1 dev eth0 scope link src 192.168.0.2
10.30.1.25 dev tun1 proto kernel scope link src 10.30.1.26
192.168.0.0/24 dev eth0 proto kernel scope link src 192.168.0.2
10.0.0.0/24 dev eth1 proto kernel scope link src 10.0.0.1
default via 192.168.0.1 dev eth0 src 192.168.0.2

Table local:

local 192.168.0.2 dev eth0 proto kernel scope host src 192.168.0.2
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
local 10.30.1.26 dev tun1 proto kernel scope host src 10.30.1.26
local 10.0.0.1 dev eth1 proto kernel scope host src 10.0.0.1
broadcast 192.168.0.255 dev eth0 proto kernel scope link src 192.168.0.2
broadcast 192.168.0.0 dev eth0 proto kernel scope link src 192.168.0.2
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
broadcast 10.0.0.255 dev eth1 proto kernel scope link src 10.0.0.1
broadcast 10.0.0.0 dev eth1 proto kernel scope link src 10.0.0.1
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1

Table main:

192.168.0.1 dev p10p1 scope link src 192.168.0.2
10.30.1.25 dev tun1 scope link src 10.30.1.26
192.168.0.0/24 dev p10p1 proto kernel scope link src 192.168.0.2
10.0.0.0/24 dev eth1 proto kernel scope link src 10.0.0.1
default via 192.168.0.1 dev p10p1

Table TUN:

10.30.1.25 dev tun1 scope link src 10.30.1.26
30.40.50.0/24 dev tun1 scope link
default via 10.30.1.25 dev tun1 src 10.30.1.26

//NOTE: the openvpn server pushes a gateway address of 10.30.1.25 and a client address of 10.30.1.26.
// my openvpn client config has line `route-noexec`