From mboxrd@z Thu Jan  1 00:00:00 1970
From: Bernardo Silveira <bernardojts@gmail.com>
Date: Wed, 09 Feb 2005 18:36:48 +0000
Subject: Re: [LARTC] load balancing between two dsl links
Message-Id: <28dab43f050209103670b12985@mail.gmail.com>
List-Id: <lartc.vger.kernel.org>
References: <4209CC8F.40406@phreaker.net>
In-Reply-To: <4209CC8F.40406@phreaker.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
To: lartc@vger.kernel.org

On Thu, 10 Feb 2005 02:20:56 +0800, ro0ot <ro0ot@phreaker.net> wrote:
> Hi,
>=20
> I am connected to two DSL providers (DSL 1 - 1Mbps downlink/384kbps
> uplink and DSL 2 - 2Mbps downlink/512kpbs uplink)
>=20
> I would like to only allow ftp, pop3 and http via the DSL 1 and only
> smtp, ipsec and pptp via DSL 2.
>=20
> How can I do so?  Can I use iproute to route these protocols?
>=20
> Below is my ip routing: -
>=20
> # DSL 1
> ip route add 2.2.2.208/30 dev eth0 src 2.2.2.210 table 1
> ip route add default via 2.2.2.209 table 1
>=20
> # DSL 2
> ip route add 3.3.3.116/30 dev eth2 src 3.3.3.118 table 2
> ip route add default via 3.3.3.117 table 2
>=20
> ip rule add from 2.2.2.208/30 lookup 1
> ip rule add from 3.3.3.116/30 lookup 2
>=20
> ip route add 3.3.3.116/30 dev eth2 table 1
> ip route add 10.59.2.0/24 dev eth1 table 1
> ip route add 127.0.0.0/8 dev lo table 1
>=20
> ip route add 2.2.2.208/30 dev eth0 table 2
> ip route add 10.59.2.0/24 dev eth1 table 2
> ip route add 127.0.0.0/8 dev lo table 2
>=20
> ip route add default scope global nexthop via 2.2.2.209 dev eth0 weight
> 1 nexthop via 3.3.3.117 dev eth2 weight 1
>=20
> Below is my iptables: -
>=20
> lanif=3D"eth1"
> squid_box=3D"10.59.2.3"
> lan_net=3D"10.59.2.0/24"
>=20
> $ECHO 1 > /proc/sys/net/ipv4/ip_forward
>=20
> $IPTABLES -t nat -A PREROUTING -i $lanif -s ! $squid_box -p tcp --dport
> 80 -j DNAT --to $squid_box:3128
> $IPTABLES -t nat -A POSTROUTING -o $lanif -s $lan_net -d $squid_box -j
> SNAT --to $lan_ip
> $IPTABLES -A FORWARD -s $lan_net -d $squid_box -i $lanif -o $lanif -p
> tcp --dport 3128 -j ACCEPT
>=20
> $IPTABLES -t nat -A POSTROUTING -j MASQUERADE
>=20
> Regards,
> ro0ot
Hi,

You can use:
ipchains -A INPUT -p tcp -s 0/0 --dport 21 -m 1
ipchains -A INPUT -p tcp -s 0/0 --dport 110 -m 1
and
ip rule add fwmark 1 table 1 prio 15000

And the same for the other DSL.
BTW, is the current configuration working ok now? What kernel are you
using, which patches? Because I'm using a similar configuration and
I'm having issues with some connections timing out.

Regards,

Bernardo Silveira
Via IP Solu=E7=F5es para Internet
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/