multi-isp connection NAT not working

Daniel Wittenberg daniel-wittenberg at starken.com
Wed Sep 28 18:51:46 CEST 2005


I think this is a simple problem, but nothing I've read so far seems to
help, maybe I'm missing something.

ISP-1 (eth0) --  
                \
                 --- FIREWALL --- server
                /
ISP-2 (eth1) --

I'm just trying to get an IP on both ISP's that will allow me to connect
to server.  Right now I can connect to firewall from either ISP ok, it
is just getting through the firewall's NAT to the server, but only from
one connection.  I've put debug statements in iptables the packets seem
to go as far as NAT then not sure where they are going.  I've tried:

route add default via {ISP-1-gateway} table T1 dev eth0
rule add from {ISP-1-ip} table T1
rule add fwmark 1 table T1
iptables -t mangle -A PREROUTING -i eth0 -j MARK --set-mark 1

route add default via {ISP-2-gateway} table T2 dev eth1
rule add from {ISP-2-ip} table T1
rule add fwmark 2 table T1
iptables -t mangle -A PREROUTING -i eth1 -j MARK --set-mark 2

Any ideas?

Thanks,
Dan



More information about the netfilter mailing list