Multiple isp in shorewall squeeze debian 6.0

Hola mis amados lectores en mi trabajo tengo dos lineas ISP (AT/T y Claro) como configuramos para nuestros equipos 2 rutas de internet( 1 de backup), balanceo de carga, etc. (ver grafico)

root@localhost# cat >> /etc/params<< 'EOF'
IP_PE_CL=206.124.46.254
IP_PE_AT=130.252.99.254
IP_ETH0_FW=206.124.46.176
IP_ETH1_FW=130.252.99.254
IP_LAN=172.16.0.0/24 
IF_NET_CL=eth0
IF_NET_AT=eth1
IF_LAN=eth2
EOF

root@localhost# cat >> /etc/shorewall/providers << 'EOF'
#NAME   NUMBER  MARK  DUPLICATE INTERFACE GATEWAY  OPTIONS         COPY
CAMP    1       10     main      eth0   206.124.46.254 balance,track  eth1
TDP     2       20     main      eth1   130.252.99.254 balance,track  eth1
EOF

root@localhost# cat >> /etc/shorewall/masq << 'EOF'
eth0    0.0.0.0/0 206.124.146.176
eth1    0.0.0.0/0 130.252.99.254
EOF

root@localhost# cat >> /etc/shorewall/interfaces
net $IF_NET_CL
net $IF_NET_AT
lan $IF_LAN

root@localhost# cat >> /etc/shorewall/policy << 'EOF'
#SOURCE         DEST            POLICY          LOG LEVEL       LIMIT:BURST
# The FOLLOWING POLICY MUST BE LAST
fw              all             ACCEPT          info
net             net             DROP            info
all             all             DROP            info
EOF

root@localhost# cat /etc/shorewall/rules 
#############################################################################################################
#ACTION         SOURCE          DEST            PROTO   DEST    SOURCE          ORIGINAL        RATE            USER/   MARK
#                                                       PORT    PORT(S)         DEST            LIMIT           GROUP

# Drop Ping from the "bad" net zone.. and prevent your log from being flooded..
Ping(ACCEPT)    net             $FW 
ACCEPT          net             $FW     tcp     22  

#################################### DMZ ####################################################################
#ACTION         SOURCE          DEST            PROTO   DEST    SOURCE          ORIGINAL        RATE            USER/   MARK
#                                                       PORT    PORT(S)         DEST            LIMIT           GROUP
Ping(ACCEPT)    lan             $FW 
ACCEPT          lan             net