From: Mohan Sundaram <mohan.tux@gmail.com>
To: lartc@vger.kernel.org
Subject: Re: [LARTC] exporting service on multiple wan
Date: Fri, 19 Oct 2007 02:31:01 +0000 [thread overview]
Message-ID: <47181415.8000309@vsnl.com> (raw)
In-Reply-To: <47176D59.20909@duet.it>
Fabio Marcone wrote:
> Hi all,
> I've a routing problem. I'm setting up a router based on debian (kernel
> 2.4).
>
> I need to setup routing to export an ftp service (ftp server is in dmz)
> to 2 wan (both).
>
> I setup prerouting ad forward rule with no problem.
>
> The problem is that reply packet use default gateway (default wan) even
> though they are enter using the other wan.
>
> I solved it marking packets in input from the dmz iface and force to use
> another gateway (iproute2), but in this way I don't export ftp service
> on default wan.
>
> how I can setup routing to export ftp service on both iface?
>
> Thanks in advance,
> Fabio
One way to do this:
1. Assign 2 private domain IP addresses to the ftp server and listen to
both for ftp. IP1 and IP2
2. Map one IP each for WAN address. WAN1>>IP1 and WAN2>>IP2
3. On the Linux machine, set policy routing based on src IP of reply
packet i.e. src IP1 goes thro' WAN1 and src IP2 goes thro' WAN2.
Mohan
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
next prev parent reply other threads:[~2007-10-19 2:31 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-10-18 14:27 [LARTC] exporting service on multiple wan Fabio Marcone
2007-10-19 2:31 ` Mohan Sundaram [this message]
2007-10-19 2:32 ` Salim S I
2007-10-19 4:21 ` Mohan Sundaram
2007-10-19 5:36 ` Salim S I
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=47181415.8000309@vsnl.com \
--to=mohan.tux@gmail.com \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.