On Wed, Sep 26, 2001 at 02:05:42PM -0400, Adrian Chung wrote: > If this machine is also running daemons, does it send replies back out > the same interface they came in on? That'll break a lot of things if > you receive packets via ISP1, and send replies back via ISP2. That sometimes happens - policy routing can help with that problem: $ ip rule ls 0: from all lookup local 32765: from 213.156.3.162 lookup pine 32766: from all lookup main 32767: from all lookup default $ ip route ls 195.190.241.81 dev ppp0 proto kernel scope link src 194.109.252.152 213.156.3.160/28 dev eth1 proto kernel scope link src 213.156.3.162 10.0.0.0/24 dev eth0 proto kernel scope link src 10.0.0.150 192.168.0.0/24 dev eth2 proto kernel scope link src 192.168.0.1 default via 195.190.241.81 dev ppp0 $ ip route ls table pine default via 213.156.3.161 dev eth1 This forces packets to go the right way. Regards, bert -- http://www.PowerDNS.com Versatile DNS Software & Services Trilab The Technology People Netherlabs BV / Rent-a-Nerd.nl - Nerd Available - 'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet