[LARTC] 2 gateways - routing based in source address
Jorge Evangelista
netsecuredata at gmail.com
Wed May 30 03:28:07 CEST 2007
Hi,
I have not tried it yet. I think that you have to make a rule similiar as
ip rule add from 0.0.0.0/0 table 100
ip route add default via 192.168.1.254 table 100 proto static
ip rule add from 0.0.0.0/0 table 200
ip route add default via 192.168.0.254 table 200 proto static
#Mark incoming packets for later routing
iptables -t mangle -A PREROUTING -j CONNMARK --restore-mark
iptables -A PREROUTING -t mangle -i eth2 -s 0.0.0.0/0 -p tcp --dport
80 -j MARK --set-mark 1
iptables -A PREROUTING -t mangle -i eth2 -s 0.0.0.0/0 -p tcp --dport
443 -j MARK --set-mark 1
iptables -A PREROUTING -t mangle -i eth2 -s 0.0.0.0/0 -j MARK --set-mark 2
ip rule add from all fwmark 1 table 100
ip rule add from all fwmark 2 table 200
For NAT
iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to $IP_ETH0
iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to $IP_ETH1
On 5/29/07, Pablo Fernandes Yahoo <fernandes_pablo at yahoo.com.br> wrote:
>
>
>
> Hi,
>
>
>
> First of all, thank you for your help.
>
>
>
> And how can i put all the traffic comming from anywhere with destination
> port 80 or 443 to go out by the gateway 192.168.1.254, while all the rest
> going out by 192.168.0.254 ?
>
>
>
> Im trying here different ways with ToS but it isn't working. Thank you for
> any Tip.
>
>
>
> Regards
>
>
>
> >Hi Pablo,
>
> >
>
> >You have to configure your box linux similar to:
>
> >
>
> >ip rule add from 10.20.0.0/24 to 0.0.0.0/0 table 100
>
> >ip route add default via 192.168.0.254 table 100
>
> >
>
> >ip rule add from 10.30.0.0/24 to 0.0.0.0/0 table 200
>
> >ip route add default via 192.168.1.254 table 200
>
> >
>
> >
> _______________________________________________
> LARTC mailing list
> LARTC at mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
>
>
--
"The network is the computer"
More information about the LARTC
mailing list