[LARTC] routing incoming port 82

[LARTC] routing incoming port 82

[ro0ot]

Hi,

I have two DSL line from the different provider connected to my Linux 
Router Firewall.  Server_A is behind the Linux Router Firewall.


DSL0 --
            | ---- LINUX_ROUTER_FW -- SERVER_A
DSL1 --


I have the following IPTABLES command to make incoming access to Server 
A's web service throught port 82 as below: -

$IPTABLES -t nat -A PREROUTING -i eth1 -p tcp --dport 82 -j DNAT --to 
10.59.2.2:80
$IPTABLES -t nat -A PREROUTING -i eth2 -p tcp --dport 82 -j DNAT --to 
10.59.2.2:80

The problem is sometimes when I access the Server A's web service using 
the following link below, after like few minutes...it cannot be accessible.

http://<IP_ADDRESS_DSL0>:82

Then, I have to switch to the following link below to access it.

http://<IP_ADDRESS_DSL1>:82

How can I solve this?

Regards,
rootlinux





_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] routing incoming port 82

[Peter Surda]

On Tue, 28 Jun 2005 01:11:18 +0800 ro0ot <ro0ot@phreaker.net> wrote:

>Hi,
hi,

[cut]
>$IPTABLES -t nat -A PREROUTING -i eth1 -p tcp --dport 82 -j DNAT --to
>10.59.2.2:80
>$IPTABLES -t nat -A PREROUTING -i eth2 -p tcp --dport 82 -j DNAT --to
>10.59.2.2:80
>
>The problem is sometimes when I access the Server A's web service using
>the following link below, after like few minutes...it cannot be accessible.
This looks like bad routing, so I expect you should set up policy based routing.
You could use CONNMARK to remember the interface the connection is coming in and
then use a separate routing table for each of the marked packets coming the
other direction. I assume there are another options if you don't have CONNMARK,
but this looks like the most straigthforward solution.

>Regards,
>rootlinux
Yours sincerely,
Peter
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc