[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, kashani <[EMAIL PROTECTED]> wrote: > Grant Edwards wrote: > >> I don't understand why I have to do NAT. Can you explain why? >> (Or point me to docs that explain why?) > > router01.your.network.com > eth0 - 10.11.12.1 > eth1 - 24.1.2.231 - Comcast > eth2 - 64.1.2.1

Re: [gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread kashani
Grant Edwards wrote: I don't understand why I have to do NAT. Can you explain why? (Or point me to docs that explain why?) router01.your.network.com eth0 - 10.11.12.1 eth1 - 24.1.2.231 - Comcast eth2 - 64.1.2.132 - Speakeasy Naturally RFC 1918 space is useless outsid

[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, Grant Edwards <[EMAIL PROTECTED]> wrote: > On 2008-03-03, kashani <[EMAIL PROTECTED]> wrote: > >> I'm not aware of any iptables front end that will also manager >> policy based routing which is Cisco-ese and maybe general >> Network-ese for what you're trying to do. However I would u

[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, kashani <[EMAIL PROTECTED]> wrote: > I'm not aware of any iptables front end that will also manager > policy based routing which is Cisco-ese and maybe general > Network-ese for what you're trying to do. However I would use > shorewall (or whatever you prefer) to do most of the work

[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, Dan Cowsill <[EMAIL PROTECTED]> wrote: >> I found shorewall and firestarter, but neither looked very >> useful to me: >> >> 1) [...] I'm not building a firewall machine. > I hate to plug a non-gentoo distro, but if you're building > yourself a linux firewall and you want to do

Re: [gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread kashani
Grant Edwards wrote: I found shorewall and firestarter, but neither looked very useful to me: 1) They're both designed for configuring firewalls, and I'm not building a firewall machine. 2) Neither seemed to have any way to specify port-based routing. So it looks like plain iptables is t

Re: [gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Dan Cowsill
On Mon, Mar 3, 2008 at 2:36 PM, Grant Edwards <[EMAIL PROTECTED]> wrote: > On 2008-03-03, Jason Carson <[EMAIL PROTECTED]> wrote: > >> I'm trying to figure out how to do port-based routing. I found > >> a HOWTO that does pretty much exactly what I'm trying to do: > >> > >> http://www.linuxhori

[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, Jason Carson <[EMAIL PROTECTED]> wrote: >> I'm trying to figure out how to do port-based routing. I found >> a HOWTO that does pretty much exactly what I'm trying to do: >> >> http://www.linuxhorizon.ro/iproute2.html >> >> However, it's using iptables, which I thought was deprecated

Re: [gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Arturo 'Buanzo' Busleiman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Grant Edwards wrote: | AFAICT, iptables is the user-space portion of netfilter. That's correct, yes. - -- Arturo "Buanzo" Busleiman Reliable inter-continental Mail Relay Service - Ask me! Independent Security Consultant - SANS - OISSG http://www.b

Re: [gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Jason Carson
> On 2008-03-03, Uwe Thiem <[EMAIL PROTECTED]> wrote: >> On Monday 03 March 2008, Grant Edwards wrote: >>> I'm trying to figure out how to do port-based routing. I found >>> a HOWTO that does pretty much exactly what I'm trying to do: >>> >>> http://www.linuxhorizon.ro/iproute2.html >>> >>> Howeve

[gentoo-user] Re: How to do port-based routing?

2008-03-03 Thread Grant Edwards
On 2008-03-03, Uwe Thiem <[EMAIL PROTECTED]> wrote: > On Monday 03 March 2008, Grant Edwards wrote: >> I'm trying to figure out how to do port-based routing. I found >> a HOWTO that does pretty much exactly what I'm trying to do: >> >> http://www.linuxhorizon.ro/iproute2.html >> >> However, it's u