/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! 
/* ALSO: Don't quote this header. It makes you look lame :-) */


Hello,

I've searched high and low to find the answer, and so I come here hopeing that one of 
you fine people will be able to help.

I have a situation where I have two ISPs supplying me with static IPs.  I have a 
server (www, mail, etc...) that needs to be accessed by either ISP.  I've got two NICs 
in the machine now, set to the corresponding IPs.  My problem is this:

With my 2.2.x kernel, there is only one default route.  So if I set my default route 
to be ISP A, traffic comes in from ISP A and goes out ISP A - no problem.  However, 
traffic coming in ISP B goes out ISP A, where it promptly gets dropped because the ISP 
sees the source IP address is not their network.

I tried setting up a masq box on ISP B, complete with the appropriate IPCHAINS and 
port forwarding, but am still running into the same problem.

Here's the setup:

 ISP A  (1.2.3.4)    (default route)           -------------------- 
 ----------------------------------------------+eth0 (1.2.3.4)    |
                     -----------------         |  MAIN SERVER     |
                     |eth1 (10.0.0.1)+---------+eth1 (10.0.0.2)   |
 ISP B (20.2.2.2)    | MASQ BOX      |          -------------------
 --------------------+eth0 (20.2.2.2)|
                     -----------------

What I -think- I want is the masq box to rewrite the destination address from a packet 
coming in from ISP B to 10.0.0.2, -AND- rewrite the source address to 10.0.0.1.  That 
way, the main server will reply back to 10.0.0.1, which will then reverse-masq back 
out ISP B to the originator.

Does this sound right?  Is there a better way?  How do I make this scenerio work?

Bob

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- 
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to