Somewhat basic routing question

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi guys,

I realise this is problaby more basic than what this list is intended
for, but I had no luck elswhere.

Short version:  I have previously used these lines on a server with two
network interfaces, two public IPs, and one common default gateway, to
make sure that connections coming into eth1 is replied to replied to via
the same interface.  eth0 is 196.xx.xx.35, eth1 is 196.xx.xx.54, gateway
is 196.xx.xx.1:

ip rule add from 196.xx.xx.54 table eth1 prio 3000
ip route add table eth1 via 196.xx.xx.1 dev eth1

Will this work with private two network cards, two private IPs, and two
gateways in the same IP range?  eth0 192.168.1.18 with gw 192.168.1.6
and eth1 192.168.1.17 with gw 192.168.1.1.  The two gateways are NAT-ing
firewalls, will this make a difference?

Thanks
Hans

Long version:

I have to mail server (receiving only) on a network with two NAT-ing
firewalls, all in the same range. It looks like this:

              +-------------+
Internet  --- | Firewall    |
              | 192.168.1.6 |
              +-------------+
                     |
              +--------------+
              | 192.168.1.18 |
              |    Mail      |
              | 192.168.1.17 |
              +--------------+
                     |
              +--------------+
Internet  --- | Firewall     |
              | 192.168.1.1  |
              +--------------+

The first firwall forward incoming connections on port 25 to
192.168.1.17, while the second firewall forward port 25 to 192.168.1.18.

My requirement is simple.  Connections connections need to go out via
the interface that they came in on.  Right now the box replies via
192.168.1.6 (the default gw) regardless of where the connection came in.

I also have only remote access, so I can't afford to mess up :-)

Thanks
Hans

_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux