On Thursday 24 October 2002 6:25 am, ?? wrote: > Dear all... > > I'm a Chinese and I don't think that my English is well . Don't worry. I'm sure it will get better :-) > I have a Linux server (Turbo Linux7.0 in kernel 2.4.9-3) to be my NAT > server . > I have make it running iptables-1.2.2-6 . > It have 3 NIC(Network interface Card) eth0.eth1.eth2 . > I have 1 LAN and 2 WAN interface they are 192.168.1.0/255.255.255.0 and 2 > ADSL (one of my ADSL is pppoe another one is static IP) . > Now I want to bind thy all in my NAT server . > I rty to cut my LAN to 4 part are 192.168.1.0/255.255.255.192 & > 192.168.1.64/255.255.255.192 & 192.168.1.128/255.255.255.192 & > 192.168.1.192/255.255.255.192 . > > That I wish the preceding 3 part go out and in with the pppoe ADSL (ppp0) > and the final part go through with static IP(because they are my servers) . You need to use iproute2 to set up source-based policy routing. Netfilter will not change the routing of your packets for you, therefore it will not help you do what you want. Iproute2 will let you set up a more complicated routing table than the standard 'route' command, and then netfilter will happily process the packets as they go through. Antony. -- Never write it in Perl if you can do it in Awk. Never do it in Awk if sed can handle it. Never use sed when tr can do the job. Never invoke tr when cat is sufficient. Avoid using cat whenever possible.
