director:~# iptables -L -t filter
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
LOG all -- 127.0.0.0/8 anywhere LOG level warning
DROP all -- 127.0.0.0/8 anywhere
ACCEPT all -- anywhere 255.255.255.255
ACCEPT all -- 10.0.0.0/16 anywhere
ACCEPT !tcp -- anywhere BASE-ADDRESS.MCAST.NET/4
LOG all -- 10.0.0.0/16 anywhere LOG level warning
DROP all -- 10.0.0.0/16 anywhere
LOG all -- 10.0.0.0/16 anywhere LOG level warning
DROP all -- 10.0.0.0/16 anywhere
ACCEPT all -- anywhere 255.255.255.255
ACCEPT all -- anywhere 255.255.255.255
ACCEPT all -- anywhere 192.168.1.30
ACCEPT all -- anywhere 192.168.1.255
ACCEPT all -- anywhere 192.168.28.37
ACCEPT all -- anywhere 192.168.28.255
LOG all -- anywhere anywhere LOG level warning
DROP all -- anywhere anywhere
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- 10.0.0.0/16 anywhere
ACCEPT all -- 10.0.0.0/16 anywhere
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
LOG all -- anywhere 10.0.0.0/16 LOG level warning
DROP all -- anywhere 10.0.0.0/16
LOG all -- anywhere 10.0.0.0/16 LOG level warning
DROP all -- anywhere 10.0.0.0/16
LOG all -- anywhere anywhere LOG level warning
DROP all -- anywhere anywhere
Chain OUTPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere 255.255.255.255
ACCEPT all -- anywhere 10.0.0.0/16
ACCEPT !tcp -- anywhere BASE-ADDRESS.MCAST.NET/4
LOG all -- anywhere 10.0.0.0/16 LOG level warning
DROP all -- anywhere 10.0.0.0/16
LOG all -- anywhere 10.0.0.0/16 LOG level warning
DROP all -- anywhere 10.0.0.0/16
ACCEPT all -- anywhere 255.255.255.255
ACCEPT all -- anywhere 255.255.255.255
ACCEPT all -- 192.168.1.30 anywhere
ACCEPT all -- 192.168.1.255 anywhere
ACCEPT all -- 192.168.28.37 anywhere
ACCEPT all -- 192.168.28.255 anywhere
LOG all -- anywhere anywhere LOG level warning
DROP all -- anywhere anywhere
director:~# iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 10.0.0.0/16 anywhere
MASQUERADE all -- 10.0.0.0/16 anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
director:~# ip rule
0: from all lookup local
10: from 192.168.1.30 lookup inet_sbc
10: from 192.168.28.37 lookup inet_tw
32766: from all lookup main
32767: from all lookup default
director:~# ip route show table local
broadcast 192.168.1.0 dev inet_sbc proto kernel scope link src 192.168.1.30
broadcast 127.255.255.255 dev lo proto kernel scope link src 127.0.0.1
local 10.0.28.1 dev lan proto kernel scope host src 10.0.28.1
broadcast 10.0.0.0 dev lan proto kernel scope link src 10.0.28.1
broadcast 192.168.28.255 dev inet_tw proto kernel scope link src 192.168.28.37
broadcast 192.168.1.255 dev inet_sbc proto kernel scope link src 192.168.1.30
local 192.168.28.37 dev inet_tw proto kernel scope host src 192.168.28.37
broadcast 10.255.255.255 dev lan proto kernel scope link src 10.0.28.1
broadcast 10.0.255.255 dev lan proto kernel scope link src 10.0.28.1
broadcast 127.0.0.0 dev lo proto kernel scope link src 127.0.0.1
broadcast 192.168.28.0 dev inet_tw proto kernel scope link src 192.168.28.37
local 127.0.0.1 dev lo proto kernel scope host src 127.0.0.1
local 192.168.1.30 dev inet_sbc proto kernel scope host src 192.168.1.30
local 127.0.0.0/8 dev lo proto kernel scope host src 127.0.0.1
director:~# ip route show table inet_sbc
192.168.1.0/24 dev inet_sbc proto kernel scope link src 192.168.1.30
default via 192.168.1.1 dev inet_sbc
director:~# ip route show table inet_tw
192.168.100.1 dev inet_tw scope link src 192.168.28.37
192.168.28.0/24 dev inet_tw proto kernel scope link src 192.168.28.37
default via 192.168.28.1 dev inet_tw
director:~# ip route show table main
192.168.100.1 dev inet_tw scope link src 192.168.28.37
192.168.1.0/24 dev inet_sbc proto kernel scope link src 192.168.1.30
192.168.28.0/24 dev inet_tw proto kernel scope link src 192.168.28.37
10.0.0.0/16 dev lan proto kernel scope link src 10.0.28.1
default equalize
nexthop via 192.168.28.1 dev inet_tw weight 1
nexthop via 192.168.1.1 dev inet_sbc weight 1
director:~# ip route show table default