On Friday 2005-August-19 10:55, Brent Clark wrote: > I currently have been reading the following doc. > > http://linux-ip.net/html/adv-multi-internet.html > > and have changed my scripts accordingly. Not quite. > my setup is as so > > firewall: > eth0 196.36.10.114 -> Routes traffic to old ISP > eth1 192.168.111.10 -> Private Lan > eth2 192.168.10.100 -> for ADSL > > Adsl modem: > ipaddress: 192.168.10.200 (external ip dynamically assigned) This "modem" is also functioning as a NAT router? So in effect your 192.168.10.100 IP (eth2) can function as an external interface? > ## Create the table > ip route flush table TELKOM >>/dev/null > ip route show table main |grep -Ev ^default\ What does this command, without the "\<newline>" and pipe, return? > | while read ROUTE ; do > > ip route add table TELKOM $ROUTE > done > > ## Add the ADSL as route to route table 4 > > ip route add default via 192.168.10.200 dev eth2 table TELKOM > >>/dev/null > > ## Add the route to table TELKOM > > ip rule add fwmark 1 table TELKOM >> /dev/null And what do your routing rules show at this point? > $IPT -t nat -A PREROUTING -i eth1 -t mangle -p tcp --dport 80 -j MARK > --set-mark 1 > $IPT -t nat -A PREROUTING -i eth1 -t mangle -p tcp > --dport 443 -j MARK --set-mark 1 > > # SNAT the Private LAN > $IPT -t nat -A POSTROUTING -o eth0 -s 192.168.111.0/24 -j SNAT > --to-source 196.36.10.114 > #$IPT -t nat -A POSTROUTING -o eth2 -s > 192.168.111.0/24 -j SNAT --to-source 192.168.10.200 Why is that one commented? > $IPT -t nat -A POSTROUTING -o eth2 -s 192.168.111.0/24 -j MASQUERADE MASQUERADE will not work with dual routing. -- mail to this address is discarded unless "/dev/rob0" or "not-spam" is in Subject: header