multi provider + P2P

[patrik lojan]

 Zdravim,

potrebujem presmerovat v sieti, P2P spojenia cez rozhranie(eth3),
zvysok cez eth0, do netu.Siet vyzera takto:

----eth0(IP1)-||-eth2---(LAN)
----eth3(IP2)-||

na eth0,eth3 su staticke IP, su to rozhrania cez ktore idem k dvom
PROVIDEROM, Z LAN, P2P traffic rutujem von cez providera za rozhranim
eth3,problem ktory mam je v tom,ze ked snifujem na rozhrani eth3,tak
su tam pakety maskovane IP-ckou rozhrania eth0,aj ked ja potrebujem
aby boli maskovane IP-ckou rozhrania eth3.

Maskaradu mam nastavenu takto: 

iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source IP1 
iptables -t nat -A POSTROUTING -o eth3 -j SNAT --to-source IP2

Aj napriek tomu pakety iduce cez rozhranie eth3 maju vzdy zmenenu
zdrojovu adresu na IP1 (maskovanu IP1-kou),ja potrebujem vsak IP2


Vypis:
------------------------------------------------------ 
 v NAT tabulke:

Chain POSTROUTING (policy ACCEPT 177K packets, 13M bytes)

pkts bytes target prot opt in out source destination

350 17930 SNAT all -- * eth3 0.0.0.0/0 0.0.0.0/0 to:192.168.1.2

49301 2649K SNAT all -- * eth0 0.0.0.0/0 0.0.0.0/0 to:IP1
-------------------------------------------------------
# ip rule

0: from all lookup local

32763: from all fwmark 3 lookup p2p

2766: from all lookup main

32767: from all lookup default
----------------------------------------------------------
# ip route show table p2p

default via 192.168.1.1 dev eth3
----------------------------------------------------------
#este to znackovanie

${IPTS} -A PREROUTING -t mangle -i eth2 -p tcp -j CONNMARK --restore-mark

${IPTS} -A PREROUTING -t mangle -i eth2 -p tcp -m mark ! --mark 0 -j
ACCEPT

${IPTS} -A PREROUTING -t mangle -i eth2 -p tcp -m ipp2p --ipp2p -j
MARK --set-mark 3

${IPTS} -A PREROUTING -t mangle -i eth2 -p tcp -m mark --mark 3 -j
CONNMARK --save-mark
----------------------------------------------------------


IP2 - 192.168.1.2 (192.168.1.1 je IP ADSL router pripojeneho k eth3) 

Dik.
___________________________________________________________________________
Podte na navstevu k Wande - k najlepsej priatelke kazdej zeny na internete.
http://www.wanda.sk/