Sorry about the bogus syntax. I was shooting form memory. If you do the route in mangle, then I can also see the need to change the source IP with -j MASQUERADE in -nat POSTROUTING. # Every 4th SYN packet, send the syn down a different pipe (with a bad IP address for the output) iptables -t mangle -A POSTROUTING -m nth --every 4 --packet 0 -m state --state new -j ROUTE --oif ppp0 # Fix the bad IP address from the previous command and setup a conntrack for the session iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE Tell me how this goes. -----Original Message----- From: Javier Govea [mailto:jgovea@xxxxxxxx] Sent: Sunday, July 27, 2003 10:41 AM To: Daniel Chemko; Javier Govea Cc: George Vieira; netfilter@xxxxxxxxxxxxxxxxxxx; Ramin Dousti; netfilter@xxxxxxxxxxxxxxxxxxx Subject: Re: Round Robin Load Balancing Hi guys, I tried the following line (i'm using "-j ROUTE" instead of "-m route", as Daniel wrote before, because the route patch is actually a target and because "-m route" was giving me a an error. But if i'm doing it in the wrong way, please correct me):
