All pastes #719493 Raw Edit

Stuff

public text v1 · immutable
#719493 ·published 2007-09-29 10:52 UTC
rendered paste body
eth0      Link encap:Ethernet  HWaddr 00:13:D4:C3:B9:FD
          inet addr:10.0.0.1  Bcast:10.0.0.255  Mask:255.255.255.0
          inet6 addr: fe80::213:d4ff:fec3:b9fd/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:188444 errors:0 dropped:0 overruns:0 frame:0
          TX packets:205640 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:27310012 (26.0 MiB)  TX bytes:144816930 (138.1 MiB)
          Interrupt:58

eth1      Link encap:Ethernet  HWaddr 00:13:D4:C3:B9:FE
          inet addr:XX.XX.73.2  Bcast:XX.XX.73.7  Mask:255.255.255.248
          inet6 addr: fe80::213:d4ff:fec3:b9fe/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:651295 errors:0 dropped:0 overruns:0 frame:0
          TX packets:845406 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:66218606 (63.1 MiB)  TX bytes:76423397 (72.8 MiB)
          Interrupt:66

eth2      Link encap:Ethernet  HWaddr 00:02:44:AB:17:23
          inet addr:192.168.2.15  Bcast:192.168.2.255  Mask:255.255.255.0
          inet6 addr: fe80::202:44ff:feab:1723/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:25074 errors:0 dropped:0 overruns:0 frame:0
          TX packets:29973 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:11412689 (10.8 MiB)  TX bytes:5417009 (5.1 MiB)
          Interrupt:50 Base address:0xb400

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:243955 errors:0 dropped:0 overruns:0 frame:0
          TX packets:243955 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:88302687 (84.2 MiB)  TX bytes:88302687 (84.2 MiB)

# IPROUTE
ip route flush table T1
ip route flush table T2
echo "FLUSH TABLE CLEARED ..."
ip route add $ADSLNET dev $ADSLIF src $ADSLIP table T1
ip route add default via $ADSLGW table T1
ip route add $GSHDSLNET dev $GSHDSLIF src $GSHDSLIP table T2
ip route add default via $GSHDSLGW table T2
#--ip route add $ADSLNET dev $ADSLIF src $ADSLIP
#--ip route add $GSHDSLNET dev $GSHDSLIF src $GSHDSLIP
#--ip route add default via $GSHDSLGW $GSHDSLIF
ip rule add fwmark 1 table T1
ip rule add fwmark 2 table T2
ip rule add from $ADSLIP table T1
ip rule add from $GSHDSLIP table T2
ip route add $INTNET dev $INTIF table T1
ip route add $GSHDSLNET dev $GSHDSLIF table T1
ip route add 127.0.0.0/8 dev lo  table T1
ip route add $INTNET dev $INTIF table T2
ip route add $ADSLNET dev $ADSLIF table T2
ip route add 127.0.0.0/8 dev lo table T2
#ip route flush cache

#IPTABLES
echo 1 > /proc/sys/net/ipv4/ip_forward

#$IPTABLES -A FORWARD -s $INTNET -j ACCEPT
#$IPTABLES -t nat -A POSTROUTING -s $INTNET -j MASQUERADE
#$IPTABLES -t nat -A PREROUTING -i $INTIF -p tcp --dport 80 -j DNAT --to $INTIP:3128
#$IPTABLES -t nat -A PREROUTING -i $INTIF -p tcp --dport 80 -j REDIRECT --to-port 3128

#iptables -t mangle -A OUTPUT -j MARK --set-mark 1
#iptables -t mangle -A OUTPUT -j RETURN

$IPTABLES -A FORWARD -j ACCEPT
$IPTABLES -t nat -A POSTROUTING -j MASQUERADE
$IPTABLES -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to $INTIP:3128
$IPTABLES -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128

iptables -t mangle -A PREROUTING -p udp --dport 5004:5082  -j MARK --set-mark 2
iptables -t mangle -A PREROUTING -p udp --dport 5004:5082  -j RETURN

iptables -t mangle -A PREROUTING -p udp --dport 10000:11000  -j MARK --set-mark 2
iptables -t mangle -A PREROUTING -p udp --dport 10000:11000  -j RETURN

iptables -t mangle -A PREROUTING -j MARK --set-mark 1
iptables -t mangle -A PREROUTING -j RETURN

pbx:/etc/init.d# ip route show
XX.XX.73.0/29 dev eth1  proto kernel  scope link  src XX.XX.73.2
10.0.0.0/24 dev eth0  proto kernel  scope link  src 10.0.0.1
192.168.2.0/24 dev eth2  proto kernel  scope link  src 192.168.2.15
default via XX.XX.73.1 dev eth1
default via 192.168.2.1 dev eth2

pbx:/etc/init.d# ip rule show
0:      from all lookup 255
32762:  from XX.XX.73.2 lookup T2
32763:  from 192.168.2.15 lookup T1
32764:  from all fwmark 0x2 lookup T2
32765:  from all fwmark 0x1 lookup T1
32766:  from all lookup main
32767:  from all lookup default

pbx:/etc/init.d# ip route show table T1
XX.XX.73.0/29 dev eth1  scope link
10.0.0.0/24 dev eth0  scope link
192.168.2.0/24 dev eth2  scope link  src 192.168.2.15
127.0.0.0/8 dev lo  scope link
default via 192.168.2.1 dev eth2

pbx:/etc/init.d# ip route show table T2
XX.XX.73.0/29 dev eth1  scope link  src XX.XX.73.2
10.0.0.0/24 dev eth0  scope link
192.168.2.0/24 dev eth2  scope link
127.0.0.0/8 dev lo  scope link
default via XX.XX.73.1 dev eth1