Displaying 1 result from an estimated 1 matches for "ip1_in_lan2".
2005 Nov 23
0
Source based routing, some TCP packets not SNAT-ed
...le add fwmark 1 lookup LAN2
ip route add default via GW1
ip route add table LAN2 default via GW2
ip route flush cache
So the default routing table has default route set to GW1 and the table
LAN2 has default gw set to GW2.
I am marking packets in iptables.
iptables -t mangle -A PREROUTING -s $IP1_IN_LAN2
-d ! 10.0.0.0/255.0.0.0 -j MARK --set-mark 0x1
iptables -t mangle -A PREROUTING -s $IP2_IN_LAN2
-d ! 10.0.0.0/255.0.0.0 -j MARK --set-mark 0x1
The last thing in my firewall is:
iptables -t nat -A POSTROUTING -o eth4 -j SNAT
--to-source $Public_IP
The configuration is quite simple, but n...