> -----Original Message----- > From: netfilter-owner@xxxxxxxxxxxxxxx > [mailto:netfilter-owner@xxxxxxxxxxxxxxx] > On Behalf Of Grant Taylor > Sent: Friday, July 25, 2008 11:10 AM > > Given that the source IP of your packets can change mid stream, you > could use the "nth" match extension. Using "nth" you would match > packets to decide how to mark them and then use the mark to determine > what routing table to use which would ultimately decide which outbound > path to use. The following setup does load balancing across the uplinks. However, the source address in the outgoing packets is not being SNAT'ed. Any suggestions? iptables -t raw -A PREROUTING -i eth0 -p udp --sport $SPORT -j NOTRACK iptables -t mangle -A PREROUTING -p udp --sport $SPORT -m statistic --mode nth --every 3 --packet 1 -j MARK --set-mark 1 iptables -t mangle -A PREROUTING -p udp --sport $SPORT -m statistic --mode nth --every 3 --packet 2 -j MARK --set-mark 2 iptables -t mangle -A PREROUTING -p udp --sport $SPORT -m statistic --mode nth --every 3 --packet 3 -j MARK --set-mark 3 iptables -t nat -A POSTROUTING -o $UPLINK1IF -j SNAT --to $UPLINK1IP iptables -t nat -A POSTROUTING -o $UPLINK2IF -j SNAT --to $UPLINK2IP iptables -t nat -A POSTROUTING -o $UPLINK3IF -j SNAT --to $UPLINK3IP ip route add $UPLINK1NET dev $UPLINK1IF src $UPLINK1IP table uplink1 ip route add default via $UPLINK1GW table uplink1 ip rule add fwmark 1 table uplink1 ip route add $UPLINK2NET dev $UPLINK2IF src $UPLINK2IP table uplink2 ip route add default via $UPLINK2GW table uplink2 ip rule add fwmark 2 table uplink2 ip route add $UPLINK3NET dev $UPLINK3IF src $UPLINK23P table uplink3 ip route add default via $UPLINK3GW table uplink3 ip rule add fwmark 3 table uplink3 -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
