Re: multiple nic/IP in firewall

2013-01-30 Thread Roberto Scattini
On Sun, Jan 27, 2013 at 10:51 AM, Pascal Hambourg wrote: > Roberto Scattini a écrit : > > > > i just cant make it work. > > all my outgoing packets keep going through the default gateway (even if > > they have the correct IP address, from the other nic...). > > > > i think i need an explanation...

Re: multiple nic/IP in firewall

2013-01-27 Thread Pascal Hambourg
Roberto Scattini a écrit : > > i just cant make it work. > all my outgoing packets keep going through the default gateway (even if > they have the correct IP address, from the other nic...). > > i think i need an explanation... because i cant undestand how does the > routing tables know that a p

Re: multiple nic/IP in firewall

2013-01-24 Thread Roberto Scattini
On Wed, Jan 23, 2013 at 9:45 PM, Tom Furie wrote: > On Tue, Jan 22, 2013 at 07:54:25PM -0300, Roberto Scattini wrote: > > > ~# route -n > > Kernel IP routing table > > Destination Gateway Genmask Flags Metric RefUse > > Iface > > XX.220.XX.176 0.0.0.0 255.255.255.

Re: multiple nic/IP in firewall

2013-01-23 Thread Tom Furie
On Tue, Jan 22, 2013 at 07:54:25PM -0300, Roberto Scattini wrote: > ~# route -n > Kernel IP routing table > Destination Gateway Genmask Flags Metric RefUse > Iface > XX.220.XX.176 0.0.0.0 255.255.255.255 UH0 00 eth3 > YY.20.YY.0 0.0.0.0

Re: multiple nic/IP in firewall

2013-01-23 Thread Roberto Scattini
On Wed, Jan 23, 2013 at 8:00 PM, Tom Furie wrote: > > > Possibly a silly question, but something you might have overloooked - > what does your nat table look like? Are you forwarding the traffic from > eth4 to your web server? > > Cheers, > Tom > tom, yes, i have the same rules that i have for m

Re: multiple nic/IP in firewall

2013-01-23 Thread Tom Furie
On Wed, Jan 23, 2013 at 05:47:02PM -0300, Roberto Scattini wrote: > i also tried a different approach, found somewhere with google, that is > more in line with my understanding of the problem. > basically, it marks the packets so they can be routed back to the same nic > they came in: > > ip rout

Re: multiple nic/IP in firewall

2013-01-23 Thread Roberto Scattini
hi again, Dňa Wed, 23 Jan 2013 00:07:51 -0300 "Carlos Miranda Molina > (Mstaaravin)" napísal: > > > :~# ip route add default scope global nexthop via XX.220.XX.177 dev > > eth3 weight 1 nexthop via YY.20.YY.Y dev eth4 weight 1 > > :~# ip route add '127.0.0.0/8' dev lo table T1 > > :~# ip route ad

Re: multiple nic/IP in firewall

2013-01-23 Thread Slavko
Hi, in English, please! Dňa Wed, 23 Jan 2013 00:07:51 -0300 "Carlos Miranda Molina (Mstaaravin)" napísal: > On Tue, Jan 22, 2013 at 10:42 PM, Roberto Scattini < > roberto.scatt...@gmail.com> wrote: > > > 1. the second interface, in on same subnet as the first > > interface? no, they are co

Re: multiple nic/IP in firewall

2013-01-22 Thread Carlos Miranda Molina (Mstaaravin)
On Tue, Jan 22, 2013 at 10:42 PM, Roberto Scattini < roberto.scatt...@gmail.com> wrote: > 1. the second interface, in on same subnet as the first interface? > no, they are completely different > > >> 2. the gateway for second interface is different as the first >> interface? >> > yeah, bot

Re: multiple nic/IP in firewall

2013-01-22 Thread Roberto Scattini
On Tue, Jan 22, 2013 at 9:46 PM, Carlos Miranda Molina (Mstaaravin) < mstaara...@gmail.com> wrote: > >> > 1. the second interface, in on same subnet as the first interface? > no, they are completely different > 2. the gateway for second interface is different as the first > interface? >