Consider the following:
________
(ISP1)=====eth0:| 2.4.18 |
|Firewall|:eth2=====(WWW/DNS server @ 10.3.2.1)
(ISP2)=====eth1:|__NAT___|
On the firewall there are these DNAT rules:
iptables -t nat -A PREROUTING -i eth0 -p tcp -d REAL.IP.FROM.ISP1 --dport
25 -j DNAT --to 10.3.2.1:25
iptables -t nat -A PREROUTING -i eth1 -p tcp -d REAL.IP.FROM.ISP2 --dport
25 -j DNAT --to 10.3.2.1:25
Question:
What sort of SNAT and/or policy routing can I do so that the responses
from the internal 10.3.2.1 server are SNATed to and leave the appropriate
external interface on the firewall (the appropriate interface would be the
external interface that the connection originated from).
TIA,
Dax
