This is an exact scenario I had a while back. I did not find a resolution unfortunately. I would love to find an answer to this. >From my experiences, the traffic going back out will always try to go out the default route, and since its destination is waiting for the ISP2 ip and not the ISP ip, it will reject the packet breaking the connection. I love computers. Darryl Romano, VCP, RHCE VMware Technical Support 1-877-4-VMWARE 1-877-486-9273 Use our Knowledge Base to search for Troubleshooting information: http://www.vmware.com/kb VMware Community Access: http://www.vmware.com/community/index.jspa -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Taylor, Grant Sent: Friday, September 01, 2006 11:06 AM To: Mail List - Netfilter Subject: I need some clarification about multiple ISPs... Hello, a colleague and I are at a minor disagreement that I believe NetFilter Mailing List subscribers will be able to clarify. The situation is I have a client who has (will once they are activated) two internet connections through two different providers. Either connection will work just fine by it's self. I also believe that I can use both connections simultaneously with client initiated traffic just fine. What I perceive as a problem will be if someone (myself) initiates an inbound connection (SSH) to either of the connections. If the system is configured to use ISP 1 as the default and the connection is targeted at the IP for the ISP 2 interface, where will the connections traffic go back out from? I am of the opinion that I will need to mark the traffic that comes in on at least one of the interfaces to make sure that said marked traffic goes back out the correct interface. More specifically I suspect that will have two (sub) routing tables in addition to the main routing table. Have the system use the main routing table for all client side initiated out bound (and related) traffic. Mark traffic that comes in the interface for ISP 1 such that the returning outbound traffic will be directed to use the ISP 1 routing table. Mark traffic that comes in the interface for ISP 2 such that the returning outbound traffic will be directed to use the ISP 2 routing table. Any thought(s) / opinion(s) / suggestion(s) are welcomed and appreciated. Grant. . . .
