В Пнд, 27/07/2009 в 11:16 +0200, Michael Mattsson пишет: > Hi! > I'm trying to determine if it's possible to have different routes > (interfaces) of traffic through an iptables NAT firewall. > > The use case is that I've recently bought a VPN service to protect our > privacy due to the EU directive IPRED. > (http://en.wikipedia.org/wiki/IPRED) I have several hosts on my > network and I'm not interested in sending all traffic through the > tunnel, only traffic I'm interested in protecting. The only way I can > determine that is by looking at port ranges in and some cases source > host on my network. > > I'm interested in getting pointers to what documentation that might be > relevant in accomplishing what I want to do. I'm quite novice in using > iptables as I use firewall builder to deploy my rules. One solution could be to use iptables marks and ip rules (ip rule help) to use different routing tables for packets with different iptables marks. -- Покотиленко Костик <casper@xxxxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
