similar to: load balancing between two dsl links

got it running, really easy !!! I am running shorewall 1.2.12 on a debian stable ! and have a squid as transparent proxy on another machine (debian testing) tried to get this work the hole day: I found this iptables: ------ iptables -t nat -A PREROUTING -i eth0 -s ! $squid_box -p tcp --dport 80 -j DNAT --to $squid_box:3128 iptables -t nat -A POSTROUTING -o eth0

What changes would I need to make if there is a 4th interface that is going to a DMZ Thanks Gene

Hello! I have set up a LINUX router with two seperate uplinks to do load balancing. I made all the configuration after the "NANO-HOWTO to use more than one independent Internet connection" document. I patched my 2.4.24 kernel with patches, described in this document. My configuration is: --------------------------------------------------------------- #!/bin/bash

Hello, Is there a way to route p2p traffic on a separate ISP connection, just as you would choose a separate connection for http traffic? I tried all sorts of setups based on: http://www.braindump.dk/en/wiki/?wikipage=PolicyRouting but with no luck. Please help :) (ipp2p is up and running) _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl

Hello all, ( I apologize if this posts twice ) Here is my situation. I have 3 buildings linked with 100mbit fiber optics (2 runs that come to the corporate office). I have 3 RH9 boxes, one at each location. Each box at the remote locations have 4 NICs, one for the fiber link, one for LAN, one for the VOIP box and one for the internet connection. The corporate office has 4 NICs also, 1

Hello, people. I read iptables tutorial and lartc, but i''m still confused with one trouble. May be this question was discussed already, so forward me solution, if is. So, there''s a trouble. I have debian etch linux. 2.6.18-4 kernel. On this computer i have three interfaces: eth0 - my lan, eth1, eth2 - providers. By default all internet traffic routed through eth2. But i

Hi all, I have a bridging firewall running fine with kernel 2.4.31 (Slackware 10.1) and iptables 1.2.11 Yesterday I install the new kernel 2.6.14.3 and iptables 1.3.4 but the bridging firewall doesn't work anymore. Do I need to patch the kernel 2.6 as what I did it for kernel 2.4? Or what I have missed? Regards, ro0ot

Hi, I have the my gateway with load balancing traffic going out over two providers. Web browsing is fine...working great. But, my clients (office staff) complains that MSN keeps disconnecting (in 5 mins). Why? Please help me... Regards, ro0ot

Hi, How can I set equal bandwidth of 512kbit downlink and 256kbit uplink for every single IP address of 254 IP addresses I have in my LAN? Regards, ro0ot

Hi, I managed to fix 128kbit for an IP address of 192.168.200.3 as below: - tc qdisc add dev eth3 root handle 1: cbq avpkt 1000 bandwidth 100mbit tc class add dev eth3 parent 1: classid 1:1 cbq rate 128kbit allot 1500 prio 5 bounded isolated tc filter add dev eth3 parent 1: protocol ip prio 16 u32 match ip dst 192.168.200.3 flowid 1:1 tc qdisc add dev eth3 parent 1:1 sfq perturb 10 How can I

I have 2 ADSL ad1 and ad2 , one PC for my firewall and some deamon on it with 3 ethernet : eth0 connect to my LAN ( 192.168.60.0/24 ) and 2 other connect to ad1 and ad2 |eth1 (10.0.1.2)--------------------ad1 ( ADSL 1 ) | My LAN(192.168.60.0/24) |---------eth0( 192.168.60.2)--> PC | |eth2 (10.0.2.2)---------------------ad2 (ADSL 2 ) All computer in LAN has default router =

Hi, Below is my Linux firewall network configuration: - eth0 - isp 1, IP: 1.1.1.10, Netmask: 255.255.255.252 eth1 - isp 2, IP: 2.2.2.10, Netmask: 255.255.255.252 eth2 - lan, IP: 172.16.0.254, Netmask: 255.255.255.0 eth3 - dmz, 192.168.0.254, Netmask: 255.255.255.0 isp 1 gateway: 1.1.1.9 isp 2 gateway: 2.2.2.9 Below is my iptables rules: - echo 1 > /proc/sys/net/ipv4/ip_forward iptables

Hi all, I have one bridge system (used for controlling bandwidth) connected to three different DSL ISP provider. I have the following setup below: - +-------------+ | br0 | | -> eth1 | -> DSL_1 | -> eth2 | +-------------+ | br1 | | -> eth3 | -> DSL_2 | -> eth4 | +-------------+ | br2 | | -> eth5

This ''MSN'' is a web site? Im guessing it ''refresh''es every 5 minutes or so. They are proably testing cookies against the ip address they appear to be comming from. This is horribly wreckless of them if they arnt offering IPv6. Are they? They only way i have to remedy this problem is to get their IP range and bind it to the most stable connexion you have,

Hi, I had successfully setup my bridge (br0) but after few minutes the br0 interface seems not working. ifconfig eth0 0.0.0.0 ifconfig eth5 0.0.0.0 brctl addbr br0 brctl addif br0 eth0 brctl addif br0 eth5 brctl stp br0 on I check on my system's /var/log/syslog file. It shows something strange messages as below: - Jan 2 10:44:22 fw01 kernel: ipt_tcpmss_target: bad length (64 bytes)

Hi all, I am running Slackware 10.1 with Kernel 2.6.14.3 includes iptables 1.3.4 with layer 7 My network diagram below: - INTERNET --- LINUX_ROUTER_FW --- PCs Below is my simple iptables script: - echo 1 > /proc/sys/net/ipv4/ip_forward iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE iptables -t mangle -A POSTROUTING -m layer7 --l7proto applejuice -j MARK --set-mark 1 iptables -t

I have a router used as a gateway for a small lan, I want half the machines to use one IP and half to use another IP when using SNAT to reach the internet. Both IPs are from the same ISP, same account, just different IPs. Heres what I''m trying: ------------------ LAN_IP="10.0.0.1" LAN_IFACE="eth0" EXT_IP_1="x.y.246.186" EXT_IFACE_1="eth1"

Below is a snippet from my firewall script isp1_ip="xx.0.5.20" isp1_gw="xx.0.5.1" isp1_net="xx.0.5.0/28" isp1_if="eth2" isp2_ip="xx.182.19.88" isp2_gw="xx.182.19.1" isp2_net="xx.182.19.0/28" isp2_if="eth3" lo_ip="127.0.0.1" lo_if="lo" lo_net="127.0.0.1/8"

Below is a snippet from my firewall script isp1_ip="xx.0.5.20" isp1_gw="xx.0.5.1" isp1_net="xx.0.5.0/28" isp1_if="eth2" isp2_ip="xx.182.19.88" isp2_gw="xx.182.19.1" isp2_net="xx.182.19.0/28" isp2_if="eth3" lo_ip="127.0.0.1" lo_if="lo" lo_net="127.0.0.1/8" ip rule delete

Hi, I have two DSL line from the different provider connected to my Linux Router Firewall. Server_A is behind the Linux Router Firewall. DSL0 -- | ---- LINUX_ROUTER_FW -- SERVER_A DSL1 -- I have the following IPTABLES command to make incoming access to Server A''s web service throught port 82 as below: - $IPTABLES -t nat -A PREROUTING -i eth1 -p tcp --dport 82 -j DNAT