Re: [LARTC] split traffic

[Omar Armas <oarmas@mpsnet.net.mx>]

> # ip route add default via 192.168.1.1 table 1
> # ip rule add from 10.0.0.0/24 table 1
> 
> 
>  : I have the next network:
>  : 
>  : 
>  : Users LAN                    Servers   LAN 
>  : (10.0.0.0/24                (mail and web [200.30.57.32/24]
>  : web surf main activity)       homologated ip's)
>  : |                                |
>  : |                                | 
>  : |                                |
>  : |                                | 
>  : |________________________________| 
>  :                   |
>  : eth1:1 10.0.0.138 |      eth1 200.30.57.33
>  :                   |
>  :           {Linux Firewall. kernel 2.4.18}
>  :                   |
>  :      eth2         |      eth0 200.30.53.22/30
>  :     192.168.1.2/30|
>  :                   |
>  :   _______________/ \______________
>  :  |                                |
>  :  |                                |
>  : {adsl router}               {Cisco router}  200.30.53.21/30
>  :  |192.168.1.1                     |
>  :  |(phone line)                    |(DS0)
>  :  |                                |
>  :  |                                |
>  : {   --------   Internet -------    }
>  : 
>  : 
>  : 


Thanks, Martin. It worked(since last week) perfect.


Now I have the above network working. Users from class 10.0.0.0/24 go
out through the adsl router, and the servers via the DS0.

NowI want to put a transparent proxy with squid, but if I configure it
with just:

iptables -t nat -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j
REDIRECT --to-ports 3128

http requests are processed via the DS0(this is because of the default
gw , I suppose), and I want them to go out via the adsl

My question is, how can I make that http requests go via the adsl with a
transparent proxy with this network configuration?

I've thought it must be the OUTPUT chain. But with what rule?


Hope you can orient me.

Thanks,

Omar




_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/