I was reading something about -m conmark, where u can set a mark to each connection and make it persistent at the initial connection link.<br><br><div><span class="gmail_quote">On 12/11/06, <b class="gmail_sendername">Marco Berizzi
</b> <<a href="mailto:pupilla@hotmail.com">pupilla@hotmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hello everybody.
<br>I'm running linux 2.6.19 with nth match to<br>alternatively snat outgoing connections to<br>two different ip addresses for load balancing<br>between two adsl lines:<br>Here is:<br><br>$IPTABLES -t nat -A POSTROUTING -s my_ip --protocol tcp -m
<br>multiport --dports 80,443 -m statistic --mode nth --every 2 -j SNAT --to<br>adslA<br>$IPTABLES -t nat -A POSTROUTING -s my_ip --protocol tcp -m<br>multiport --dports 80,443 -j SNAT --to adslB<br><br>Things are working pretty good, but some
<br>applications (https home banking for example),<br>don't work correctly (because the remote<br>server see two different ip addresses). Is<br>there any trick to tell iptables to snat<br>always with the same source ip for the same
<br>destination host? I have also modified SNAT<br>with SAME, but no luck.<br><br>TIA<br><br><br>_______________________________________________<br>LARTC mailing list<br><a href="mailto:LARTC@mailman.ds9a.nl">LARTC@mailman.ds9a.nl
</a><br><a href="http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc">http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc</a><br></blockquote></div><br>