From: "Taylor, Grant" <gtaylor@riverviewtech.net>
To: netfilter@lists.netfilter.org
Subject: Re: This is possible?
Date: Mon, 27 Nov 2006 09:35:00 -0600 [thread overview]
Message-ID: <456B05A4.8080501@riverviewtech.net> (raw)
In-Reply-To: <c576e5da0611270416v2baae792v786457639970f83@mail.gmail.com>
Mike S. Matsumoto wrote:
<snip>
> Guys, this is possible?
Yes.
> I have two connections with Internet. And I need that DMZ use
> Connection 1 and Internal NET use Connection 2 for access Internet.
>
> So, i will have one default gw for connection 1 and another for
> connection 2.
>
> How this work? Any tutorial or link for help me?
If you have different subnets on your DMZ LAN from that of your internal LAN
this can easily be accomplished with IP Route 2 rules. Namely set up one
(named / numbered) routing table for each connection and then set up some
"ip rule"s to decide which routing table to use based on source IP subnet.
If you do not have different subnets on your DMZ LAN from that of your
internal LAN, you can do something very similar based on firewall marking.
I'll presume that your DMZ LAN is on a different interface than your
internal LAN. In this case, mark one of the LAN interfaces via IPTables and
then use an "ip rule" to match the fwmark to decide which routing table to use.
Grant. . . .
prev parent reply other threads:[~2006-11-27 15:35 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-11-27 12:16 This is possible? Mike S. Matsumoto
2006-11-27 15:35 ` Taylor, Grant [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=456B05A4.8080501@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox