LARTC - Nov 2002 - routing 2 internal & 2 external nic''s

hi all,
i have one problem with routing.

what i will do is this:           ISP router
                                                   |
                                        ISP switch
                                                |  |  |   ( we have 3 ports)
                                                |  |  |
                                          Our switch
                                               |      |
                                               |      |
                                            eth0  eth1  
                  firewall-1             |         |
                    (4 nics)           eth2  eth3      
                                                |        |
                                                |        |
                                          DMZ switch        ( one network )
                                                      |
                                                      |                  
                                                  
                                           DMZ linux router(SNAT all 
outgoing connection from LAN to one IP,
                                                      |                 
   in the same network as DMZ ,default route to eth3 )
                                                      |
                                                    LAN                  
                                      


i will that all outgoing traffic from DMZ get over eth2 - eth0 NIC''s to
ISP and over eth2 back to DMZ.

And all outgoing traffic from LAN get over eth3 - eth1 NIC''s to ISP
switch.


But allways i send packet from eth3 get away over eth0 (default route) ...

which ip rule i must set to do this routing?

thanks in advace


roman




_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

a few weeks ago i found a german advanced routing-how-to somewhere on
a website.
i didn''t bookmark this site and today i can not find it again.

somebody knows a link to a german how-to?

thanks a lot ...

micha
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Roman,

 : i will that all outgoing traffic from DMZ get over eth2 - eth0 NIC''s
to
 : ISP and over eth2 back to DMZ.
 : And all outgoing traffic from LAN get over eth3 - eth1 NIC''s to ISP
switch.

This should give you some idea of how to solve this problem, although this 
is not a complete solution:

   http://mailman.ds9a.nl/pipermail/lartc/2002q3/005003.html

You''ll probably want to use "ip rule add iif eth0 table ISPA"
or something
similar.

You should read up and understand the how and why of multiple routing 
tables:

  http://plorf.net/linux-ip/html/routing-tables.htm

Additionally, you''ll need to read up on "ip rule":

  http://plorf.net/linux-ip/html/tools-ip-rule.htm

Good luck,

-Martin


-- 
Martin A. Brown --- SecurePipe, Inc. --- mabrown@securepipe.com


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/