On Monday 05 January 2004 19:06, Gordan Bobic wrote: > On Monday 05 Jan 2004 11:54, Gordan Bobic wrote: > > On Monday 05 Jan 2004 11:28, ArtÅras Ålajus wrote: > > > Gordan Bobic wrote: > > > > Hmm. Just replace -j MASQUERADE with -j SNAT? Will that not break > > > > other things? > > > -j SNAT your_ip > > Or rather -j SNAT --to-source your_ip. I get it. I'll check if that works > > better than masquerading. > Just tried it - no difference. Packets still come out with source IP > address not matching the interface. :-( Try it switch manually, first you set up without iproute. Remove all the tables you have created and flush it. Try with ISP1 first. Do SNAT --to ip.of.ISP1 Is it work? Okay, now switch to the ISP2. Do SNAT --to ip.of.ISP2. It should be work, otherwise something wrong with the kernel or iptables you had on your machine. Finish this step first, report back to the list. Regards, Rio Martin. _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/