Hi Ppl
I have 5 adsl lines that after reading quite a bit
i managed to get load balanced now abvoiusly it doesnt load balance evenly and
this works on what routes are still in the routing cache. my question is my
outbound masquerading had to be modified to use snat in iptables instead of just
plain masquerading my outbound masquerading now works but my inbound port
forwarding doesnt work would this be an iptables problem or a routing
issue...
i have opened all the relavent ports on each of the
interfaces and I am not getting any logged denies the connection just never
opens
I am running the following
debian woody
kernel 2.6.6
iptables v1.2.6a
Chain PREROUTING (policy ACCEPT 20 packets, 4483
bytes)
pkts bytes target prot opt in out source destination 0 0 DNAT tcp -- ppp0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:110 to:10.0.0.12:110 0 0 DNAT tcp -- ppp1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:110 to:10.0.0.12:110 0 0 DNAT tcp -- ppp2 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:110 to:10.0.0.12:110 0 0 DNAT tcp -- ppp3 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:110 to:10.0.0.12:110 0 0 DNAT tcp -- ppp4 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:110 to:10.0.0.12:110 Chain FORWARD (policy DROP 0 packets, 0
bytes)
pkts bytes target prot opt in out source destination 0 0 ACCEPT tcp -- ppp0 eth0 0.0.0.0/0 10.0.0.12 tcp dpt:110 0 0 ACCEPT tcp -- ppp1 eth0 0.0.0.0/0 10.0.0.12 tcp dpt:110 0 0 ACCEPT tcp -- ppp2 eth0 0.0.0.0/0 10.0.0.12 tcp dpt:110 0 0 ACCEPT tcp -- ppp3 eth0 0.0.0.0/0 10.0.0.12 tcp dpt:110 0 0 ACCEPT tcp -- ppp4 eth0 0.0.0.0/0 10.0.0.12 tcp dpt:110 ip rule list
0: from all lookup
local
32761: from 165.165.170.110 lookup T5 32762: from 165.165.187.47 lookup T4 32763: from 165.165.189.95 lookup T3 32764: from 165.165.163.95 lookup T2 32765: from 165.165.179.151 lookup T1 32766: from all lookup main 32767: from all lookup default ip route sh
165.165.160.1 dev ppp1 proto kernel
scope link src 165.165.163.95
165.165.160.1 dev ppp3 proto kernel scope link src 165.165.187.47 165.165.160.1 dev ppp4 proto kernel scope link src 165.165.170.110 165.165.160.1 dev ppp0 proto kernel scope link src 165.165.179.151 165.165.160.1 dev ppp2 proto kernel scope link src 165.165.189.95 10.0.0.0/24 dev eth0 proto kernel scope link src 10.0.0.1 default nexthop via 165.165.160.1 dev ppp0 weight 1 nexthop via 165.165.160.1 dev ppp1 weight 1 nexthop via 165.165.160.1 dev ppp2 weight 1 nexthop via 165.165.160.1 dev ppp3 weight 1 nexthop via 165.165.160.1 dev ppp4 weight 1 |