When starting, shorewall will save all default routes. When stop, it
will try to restore it. But does it badly. On multiisp setups with pingu
it will break things.
We (ab)use the RESTORE_DEFAULT_ROUTE to make it possible to avoid
restoring the default route.
The kernel changed behavior around 2.6.31. We need a way to turn off
rp_filter.
details:
http://article.gmane.org/gmane.comp.security.shorewall/23329/match=rp_filter
This will disable routefilter if ROUTE_FILTER=no in
/etc/shorewall/shorewall.conf default. To enable you will need set the
routefilter option in /etc/shorewall/interfaces
Shorewall's restore default gw will intentinally break multi routes
When no 'balance' option is specified shorewall does not change the
default gw so there is no point in restoring (breaking) it either.
