Re: routing_based_on_port/services
David Ballester - Kern Pharma <[email protected]>
| Newsgroups | gmane.comp.security.linux |
|---|---|
| Message-ID | <[email protected]> |
El lun, 03-10-2005 a las 09:41 +0000, [email protected] escribió: > Dear List! > > I just want to ask you a question.I have a linux(Secure platform) gateway server with 2 external ip address to the internet (one S/0 ADSl, second S/1 Point to Point) and one internal ip eth0 for my LAN. I need to split up the outgoing traffic.HTTP/HTTPS want to route through the ADSL and the rest of traffic (SMTP,POP3,FTP) through the Point to Point.Can i solve this with Linux iptables or whatever else. Any suggestion help.. > > regards, > > Chris Hi: You can ( must ) use 'ip route','ip rule' and tc set of instructions. In a few words. You create a table where store routes ( /etc/iproute2/rt_tables ) For example 7 out-http Then you can create a set of routes to be stored in this table For example ip route add default via adsl table out-http Then, assign policies ( rules ) to use the defined set of routes depending on the type of outgoing packet ( proto, source, dest... ). When a packet matches an assigned rule for table out-http, the routing processes 'forget' standard routes and applies the set of routes defined in table out-http. This is well explained in the excelent howto http://lartc.org/ HTH Regards David Ballester