Re: Iptables, SNAT/MASQ, Multiple gateways

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sunday, 29 September 2002, at 22:18:30 -0700,
Don Cohen wrote:

>  > ip route add default nexthop via $CONN1_IP dev $ETHX weight $X \
>  >                      nexthop via $CONN2_IP dev $ETHX weight $Y
> 
> Note that this only shapes outgoing traffic and also relies on your
> ISPs to NOT do the ingress filtering that they're really supposed to do.
> 
Just a note. The above routing doesn't prevent you from applying
SNAT/MASQ to the outgoing traffic, at least not when you have an
ethernet card for each connection (not the case) and you can know
through each one the traffic will go out.

So adding another ethernet card and a couple of "iptables" rules can
avoid problems with ISPs filtering "alien" incoming traffic :)

-- 
Jose Luis Domingo Lopez
Linux Registered User #189436     Debian Linux Woody (Linux 2.4.19-pre6aa1)
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux