IPtables multiple WAN howto?

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › IPtables multiple WAN howto?

richms

28199 posts

Uber Geek

Trusted

Lifetime subscriber

#87358 27-Jul-2011 02:06

At the moment I have got the 2 internet connections here, on ETH2 of the firewall machine.

10.20.0.1 is snap, 10.20.0.2 is slingshot.

I would like to know how I can make it so that certain destinations, ports, and internal IPs have their traffic go to the appropriate router.

Also, is it possible that portfowards are available on both those routers to internal hosts (On eth0, 192.168.1.0/24) so that I can hit either WAN IP and get to the same host internally, but have the traffic get out back to the correct router? So far just having both of them DMZ the WAN IP on the linux gateway has not worked, it seems that the default gateway is the only one that will operate.

Richard rich.ms

Ragnor

8223 posts

Uber Geek

Trusted

#498392 27-Jul-2011 10:32

Doing this from scratch on a general linux distro is a lot of work/scripting/patching.

Why not use a specialised distribution that has already done all the work eg: monowall, pfsense, smoothwall, ipcop or Mikrotek RouterOS?

Also you really need 3 physical networks cards in the machine, 1 for lan, 2 for wan (1 for each ISP).

richms

28199 posts

Uber Geek

Trusted

Lifetime subscriber

#498548 27-Jul-2011 15:17

Machine is already there and running and has my asterisk and a few other things running on it, and I lack the hardware to deploy another machine to do the task of muliple wans at the moment.

I could move it to another nic, it has 4 in it as it origionally was routing between a couple of wireless bridges and my lan as well. Just was expecting that they both could go on the one nic.

Richard rich.ms