From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jason Opperisano Subject: Re: Internal PC/external Gateway Date: Sat, 14 May 2005 13:26:13 -0400 Message-ID: <20050514172613.GA24810@bender.817west.com> References: <1116061176.12835.20.camel@debianbox> <20050514153608.GA24455@bender.817west.com> <1116087634.18707.2.camel@debianbox> <20050514164144.GA24669@bender.817west.com> <1116090083.18707.6.camel@debianbox> Mime-Version: 1.0 Return-path: Content-Disposition: inline In-Reply-To: <1116090083.18707.6.camel@debianbox> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: netfilter@lists.netfilter.org On Sat, May 14, 2005 at 08:01:22PM +0300, Sadus . wrote: > this is after your email my current setup. > > iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to 10.2.2.1 > iptables -t nat -A POSTROUTING -s 192.168.1.3 -j SNAT --to > 192.168.0.141 um--that second rule will never match, assuming the packets from 192.168.1.3 are being routed out eth0--which from your OP it is. put the rule for 192.168.1.3 first. > #!/bin/bash > > IF1=eth0 > > #Provider 1 > P1=10.2.2.1 is the IP address of P1's router 10.2.2.1, or is the IP of the linux gateway on eth0 10.2.2.1? you're using the same IP in your SNAT rule and routing table--one of them is wrong. > #Provider 2 > P2=192.168.0.173 > > ip route add default via $P2 table T2 > ip rule add from 192.168.1.3 table T2 > ip route flush cache > > can't i keep it like that? or i have to set T1 too? setting up T1 is for completeness, and for the benefit of the roughly 6 people on the planet that actually search ML archives instead of posting the same 5 questions over and over and over and over and over again. T1 is not strictly necessary in your specific case. the devil is in the details--if you're not sure of what specific IP's need to go where--you need to tell us what's what. the output of 'ip -4 -o addr sh' on the linux gw would help, the IP's of the P1 and P2 routers would help, and the IP's of PC1 and PC2 would help. -j -- "Meg: Dad, if I don't get my driver's license, I'll never have any boyfriends, I'll never get married and I'll have to adopt a kid like Rosie O'Donnell. Peter: Meg... are you implying that Rosie O'Donnell cant drive?" --Family Guy