iptables / ip route packet routing with multiple gateways
Hi all. Linux noob here.
I was hoping someone could help me with configuring some routing rules on my router, an Asus AC68.
The router is connected to two gateways, wan0_gateway and wan1_gateway.
I have rules set up in the router gui that will push all traffic from every IP other than my own to wan1_gateway.
This works well so far. What I would also like to do is push specific port ranges from my machine (192.168.1.2) onto the wan1_gateway also. For instance HTTP so that downloads will not affect performance of the wan0_gateway.
This is the script I was messing with so far.. I might be way off base here so any assistance is appreciated!
Code:
#!/bin/sh
ip route flush table 100
ip route del default table 100
ip rule del fwmark 1 table 100
ip route flush cache
iptables -t mangle -F PREROUTING
ip rule add fwmark 1 table 100 via $(nvram get wan1_gateway)
ip route flush cache
iptables -t mangle -A PREROUTING -m state --state NEW -p tcp --dport 80 -d 192.168.1.2 -j CONNMARK --set-mark 1
iptables -t mangle -A PREROUTING -m state --state NEW -p tcp --dport 443 -d 192.168.1.2 -j CONNMARK --set-mark 1
iptables -t mangle -A PREROUTING -m state --state NEW -p tcp --dport 8080 -d 192.168.1.2 -j CONNMARK --set-mark 1
iptables -t mangle -A PREROUTING -m state --state NEW -p tcp --dport 8443 -d 192.168.1.2 -j CONNMARK --set-mark 1
EDIT: Actually the following seems to be working... am I on the right track?
Code:
#!/bin/sh
ip route flush table 100
ip route del default table 100
ip rule del fwmark 1 table 100
ip route flush cache
iptables -t mangle -F PREROUTING
ip rule add fwmark 1 table 100 via $(nvram get wan1_gateway)
ip route flush cache
iptables -t mangle -A PREROUTING -p tcp -i br0 -m multiport --sports 80,20,21,443,8080,8443 -d 192.168.1.2 -j MARK --set-mark 1
I have solaris11 running in a kvm virtual machine,network works fine.
I can configure it with dhcp or static.
Of course packet forward in kvm machine is enabled
The solaris11 machine can ping external network.
I have setup a solaris10 zone inside the vm
the solaris 10 zone use exclusive ip... (3 Replies)
RHEL 7.0, IPV6
Scenario:
I have routed specific network using network scripts.
1. "ip -6 route show" shows that route has been added. ( with metric 1024)
2. Ping of the specific IP through that route is successful.
3. Now after few days, for some reason, we see that cache route appears for... (3 Replies)
Hi all,
I have a solution where a system can have multiple physical interfaces but a single IP address. I am looking to insert a Squid proxy (that will also perform source NAT), but the return packets must go back to the correct interface.
client network is 10.x.x.x
network between the... (4 Replies)
Hi all,
I have a following situation:
- I want certain source IPs to be natted to a different destination IP and Port. Following is how I am achieving it:
/usr/local/sbin/iptables -t nat -A PREROUTING -p tcp -s 192.168.10.12
--dport 1500 -j DNAT --to-destination 192.168.10.20:2000
... (3 Replies)
hi guys!
I was searching few days for a solution to my problem but haven't found one or I'm too dumb to understand.
Here's what happened:
I have a linux server used as a router. It has an eth0 and eth1 (local interface). I just installed openvpn (I need it only as a client), I configured it and... (0 Replies)
edit; I found a solution that works, see thread #3 https://www.unix.com/302417065-post3.html
Hi there,
I have a small dedicated server that has four ip addresses and by default my httpd sends request using the servers main ip for all outbound connections.
I'm quite amateur at routing and... (4 Replies)
how do I make sure that the entry in the routing table on Solaris 8 stay permanent after rebooting the server.
For example
route add 172.20.1.60 -netmask 255.255.255.0 172.20.255.253
Each time the server reboots the entry disappears when using the command netstat -nr (2 Replies)
Hi,
I am involved in a project on Debian. One of my requirement is to route an IP packet in my application to a proxy server and receive the reply from the proxy server as an IP packet. My application handles data at the IP frame level. My application creates an IP packet(with all the necessary... (0 Replies)
In my college dorm, there is a file sharing network in the entire building. Problem is, there is only a manual for windows with the settings on how to connect... :mad:
They say that you have to give the following command in cmd in windows:
route add 172.16.71.0 mask 255.255.255.0... (2 Replies)
11-12-2014
iptables / ip route packet routing with multiple gateways