All pastes #718515 Raw Edit

Untitled

public text v1 · immutable
#718515 ·published 2007-09-28 14:04 UTC
rendered paste body
#IP ROUTE & RULES
ip route add $ADSLNET dev $ADSLIF src $ADSLIP table T1
ip route add default via $ADSLGW table T1
ip route add $GSHDSLNET dev $GSHDSLIF src $GSHDSLIP table T2
ip route add default via $GSHDSLGW table T2
ip rule add fwmark 1 table T1
ip rule add fwmark 2 table T2
ip rule add from $ADSLIP table T1
ip rule add from $GSHDSLIP table T2
ip route add $INTNET dev $INTIF table T1
ip route add $GSHDSLNET dev $GSHDSLIF table T1
ip route add 127.0.0.0/8 dev lo  table T1
ip route add $INTNET dev $INTIF table T2
ip route add $ADSLNET dev $ADSLIF table T2
ip route add 127.0.0.0/8 dev lo table T2

//IPTABLES
$IPTABLES -A FORWARD -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -j MASQUERADE
$IPTABLES -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to $INTIP:3128
$IPTABLES -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -t mangle -A PREROUTING -p udp --dport 5004:5082  -j MARK --set-mark 2
iptables -t mangle -A PREROUTING -p udp --dport 5004:5082  -j RETURN
iptables -t mangle -A PREROUTING -p udp --dport 10000:11000  -j MARK --set-mark 2
iptables -t mangle -A PREROUTING -p udp --dport 10000:11000  -j RETURN
iptables -t mangle -A OUTPUT -p tcp --dport 8080 -j MARK --set-mark 1
iptables -t mangle -A OUTPUT -p tcp --dport 8080 -j RETURN
iptables -t mangle -A OUTPUT -p tcp --dport 8080 -j MARK --set-mark 1
iptables -t mangle -A OUTPUT -p tcp --dport 8080 -j RETURN
iptables -t mangle -A PREROUTING -j MARK --set-mark 1
iptables -t mangle -A PREROUTING -j RETURN

pbx:~# ip route show table T1
XX.XXX.73.0/29 dev eth1  scope link
10.0.0.0/24 dev eth0  scope link
192.168.2.0/24 dev eth2  scope link  src 192.168.2.15
127.0.0.0/8 dev lo  scope link
default via 192.168.2.1 dev eth2

pbx:~# ip route show table T2
XX.XXX.73.0/29 dev eth1  scope link  src XX.XXX.73.2
10.0.0.0/24 dev eth0  scope link
192.168.2.0/24 dev eth2  scope link
127.0.0.0/8 dev lo  scope link
default via XX.XXX.73.1 dev eth1

pbx:/etc/apache2# ip route show
XX.XXX.231.120/29 dev eth0  proto kernel  scope link  src XX.XXX.231.122
10.0.0.0/24 dev eth1  proto kernel  scope link  src 10.0.0.1
192.168.2.0/24 dev eth2  proto kernel  scope link  src 192.168.2.15
default via XX.XXX.231.121 dev eth0
default via 192.168.2.1 dev eth2

pbx:/etc/apache2# ip rule show
0:      from all lookup 255
32764:  from XX.XXX.231.122 lookup T2
32765:  from 192.168.2.15 lookup T1
32766:  from all lookup main
32767:  from all lookup default