[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, Uwe Thiem [EMAIL PROTECTED] wrote: On Monday 03 March 2008, Grant Edwards wrote: I'm trying to figure out how to do port-based routing. I found a HOWTO that does pretty much exactly what I'm trying to do: http://www.linuxhorizon.ro/iproute2.html However, it's using iptables,

Re: [gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Jason Carson
On 2008-03-03, Uwe Thiem [EMAIL PROTECTED] wrote: On Monday 03 March 2008, Grant Edwards wrote: I'm trying to figure out how to do port-based routing. I found a HOWTO that does pretty much exactly what I'm trying to do: http://www.linuxhorizon.ro/iproute2.html However, it's using

Re: [gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Arturo 'Buanzo' Busleiman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Grant Edwards wrote: | AFAICT, iptables is the user-space portion of netfilter. That's correct, yes. - -- Arturo Buanzo Busleiman Reliable inter-continental Mail Relay Service - Ask me! Independent Security Consultant - SANS - OISSG

[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, Jason Carson [EMAIL PROTECTED] wrote: I'm trying to figure out how to do port-based routing. I found a HOWTO that does pretty much exactly what I'm trying to do: http://www.linuxhorizon.ro/iproute2.html However, it's using iptables, which I thought was deprecated, but there

Re: [gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Dan Cowsill
On Mon, Mar 3, 2008 at 2:36 PM, Grant Edwards [EMAIL PROTECTED] wrote: On 2008-03-03, Jason Carson [EMAIL PROTECTED] wrote: I'm trying to figure out how to do port-based routing. I found a HOWTO that does pretty much exactly what I'm trying to do:

Re: [gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread kashani
Grant Edwards wrote: I found shorewall and firestarter, but neither looked very useful to me: 1) They're both designed for configuring firewalls, and I'm not building a firewall machine. 2) Neither seemed to have any way to specify port-based routing. So it looks like plain iptables is

[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, Dan Cowsill [EMAIL PROTECTED] wrote: I found shorewall and firestarter, but neither looked very useful to me: 1) [...] I'm not building a firewall machine. I hate to plug a non-gentoo distro, but if you're building yourself a linux firewall and you want to do so without

[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, kashani [EMAIL PROTECTED] wrote: I'm not aware of any iptables front end that will also manager policy based routing which is Cisco-ese and maybe general Network-ese for what you're trying to do. However I would use shorewall (or whatever you prefer) to do most of the work and

[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, Grant Edwards [EMAIL PROTECTED] wrote: On 2008-03-03, kashani [EMAIL PROTECTED] wrote: I'm not aware of any iptables front end that will also manager policy based routing which is Cisco-ese and maybe general Network-ese for what you're trying to do. However I would use

Re: [gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread kashani
Grant Edwards wrote: I don't understand why I have to do NAT. Can you explain why? (Or point me to docs that explain why?) router01.your.network.com eth0 - 10.11.12.1 eth1 - 24.1.2.231 - Comcast eth2 - 64.1.2.132 - Speakeasy Naturally RFC 1918 space is useless

[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, kashani [EMAIL PROTECTED] wrote: Grant Edwards wrote: I don't understand why I have to do NAT. Can you explain why? (Or point me to docs that explain why?) router01.your.network.com eth0 - 10.11.12.1 eth1 - 24.1.2.231 - Comcast eth2 - 64.1.2.132 -