I think this is a simple problem, but nothing I've read so far seems to help, maybe I'm missing something. ISP-1 (eth0) -- \ --- FIREWALL --- server / ISP-2 (eth1) -- I'm just trying to get an IP on both ISP's that will allow me to connect to server. Right now I can connect to firewall from either ISP ok, it is just getting through the firewall's NAT to the server, but only from one connection. I've put debug statements in iptables the packets seem to go as far as NAT then not sure where they are going. I've tried: route add default via {ISP-1-gateway} table T1 dev eth0 rule add from {ISP-1-ip} table T1 rule add fwmark 1 table T1 iptables -t mangle -A PREROUTING -i eth0 -j MARK --set-mark 1 route add default via {ISP-2-gateway} table T2 dev eth1 rule add from {ISP-2-ip} table T1 rule add fwmark 2 table T1 iptables -t mangle -A PREROUTING -i eth1 -j MARK --set-mark 2 Any ideas? Thanks, Dan