From mboxrd@z Thu Jan 1 00:00:00 1970 From: Rio Martin Date: Tue, 06 Jan 2004 01:49:38 +0000 Subject: Re: [LARTC] Multihomed Masquerading, routing and iptables Message-Id: <200401060849.38380.rio@martin.mu> List-Id: References: <200312311649.36278.lartc@bobich.net> In-Reply-To: <200312311649.36278.lartc@bobich.net> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit To: lartc@vger.kernel.org On Monday 05 January 2004 19:06, Gordan Bobic wrote: > On Monday 05 Jan 2004 11:54, Gordan Bobic wrote: > > On Monday 05 Jan 2004 11:28, Artūras Šlajus wrote: > > > Gordan Bobic wrote: > > > > Hmm. Just replace -j MASQUERADE with -j SNAT? Will that not break > > > > other things? > > > -j SNAT your_ip > > Or rather -j SNAT --to-source your_ip. I get it. I'll check if that works > > better than masquerading. > Just tried it - no difference. Packets still come out with source IP > address not matching the interface. :-( Try it switch manually, first you set up without iproute. Remove all the tables you have created and flush it. Try with ISP1 first. Do SNAT --to ip.of.ISP1 Is it work? Okay, now switch to the ISP2. Do SNAT --to ip.of.ISP2. It should be work, otherwise something wrong with the kernel or iptables you had on your machine. Finish this step first, report back to the list. Regards, Rio Martin. _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/