wes chow wrote:
This is probably not the most elegant solution, but here it is anyway:

/sbin/iptables -A INPUT -i eth0 -j DROP -d ! 192.168.0.2
/sbin/iptables -A INPUT -i eth1 -j DROP -d ! 192.168.0.10


I'll try it out. Don't have access to the machines right now, but I'll let you know later this weekend.

You need to frobnicate your routing table a little. You want one default route out using your eth0, and then you will want to add routing exceptions with the 'route add' command. So if the remote server you need to talk to is called natasha and the ip address is 192.168.0.100 you would do this: route add -host 192.168.0.100 metric 1 eth1 . This sends all traffic from boris (192.168.0.10) to natasha (192.168.0.100) via eth1. All return traffic from natasha would be destined for 192.168.0.10 anyway so no changes are needed there.


Dave




-- [EMAIL PROTECTED] mailing list



Reply via email to