Re: [LARTC] Routing based on source address

2006-05-31 Thread Erez D
yes,see my posting at http://mailman.ds9a.nl/pipermail/lartc/2006q2/018843.htmlerez.On 5/31/06, Joost Kraaijeveld <[EMAIL PROTECTED]> wrote: Hi,Is it possible to create a routing rule that depends on the sourcehost/network, besides the target host/network?E.g. route everything from 192.168.0.x to

Re: [LARTC] Route by destination port?

2006-05-09 Thread Erez D
somthing like:iptables -t mangle -A PREROUTING -p tcp --dport 80 -j MARK --set-mark 5ip rule add fwmark 5 table 50ip route add table 50 $isp dev ppp0erez.On 5/9/06, Robert Gabriel <[EMAIL PROTECTED]> wrote: Hello all,We have two ADSL lines configured on a single box, hence interfaces ppp0 & ppp1.I

[LARTC] voip and firewall

2006-05-07 Thread Erez D
himy company just installed a new firewall.i had an ATA (grandstream handytone) that was connected via the internet to asterisk at my home.this ATA does not work anymore ( i can dial, but have no incoming audio, people can dial to me but it disconnects when i answer) this is due to the new firewall

Re: [LARTC] iptables+iproute problem

2006-03-15 Thread Erez D
your script is too long , so do not expect me to read it however, if you would like to forward mail via 2nd link, you should: 1. add default route via link1 2. add rule : ip rule add prio 30 fwmark 0x990 lookup link2 3. create table link2: ip route add table link2 ... 4. mark mail pkts with 990 :

Re: [LARTC] firewall problem

2006-03-14 Thread Erez D
On 3/14/06, William L. Thomson Jr. <[EMAIL PROTECTED]> wrote: > On Tue, 2006-03-14 at 17:49 +0200, Erez D wrote: > > > > coming to think of it, only one outgoing link was nat. could this be > > the problem ? > > Very possible. I know it was a requirement of the

Re: [LARTC] firewall problem

2006-03-14 Thread Erez D
On 3/14/06, Ethy H. Brito <[EMAIL PROTECTED]> wrote: > On Tue, 14 Mar 2006 14:00:23 +0200 > "Erez D" <[EMAIL PROTECTED]> wrote: > > > well. i ment the ip i got from my isp is aaa.aaa.aaa.aaa, not the > > local net one, sorry > > > > i do not

[LARTC] Re: firewall problem

2006-03-14 Thread Erez D
POSTROUTNING chain) pls. correct me if i'm wrong. thanks, erez. On 3/14/06, Ilya Konstantinov <[EMAIL PROTECTED]> wrote: > Where are you pinging from? Be aware that locally-generated packets > (e.g. pinging from the firewall) don't pass the NAT tables. > > Erez D wrot

Re: [LARTC] firewall problem

2006-03-14 Thread Erez D
eth1 is 10.0.0.2 connectod to a router which is 10.0.0.1 ppp0 is aaa.aaa.aaa.aaa ptp to ccc.ccc.ccc.ccc eth0 is 192.168.0.254/24 thanks erez. On 3/14/06, Ethy H. Brito <[EMAIL PROTECTED]> wrote: > On Tue, 14 Mar 2006 12:18:57 +0200 > "Erez D" <[EMAIL PROTECTED]> w

[LARTC] firewall problem

2006-03-14 Thread Erez D
snat not working my local ip is aaa.aaa.aaa.aaa asterisk sitting on the internet at ip bbb.bbb.bbb.bbb my firewall's internal ip is 192.168.0.254 i did snat: iptables -t nat -A POSTROUTING -o ppp0 -j SNAT --to aaa.aaa.aaa iptables -t nat -L -v gives: Chain POSTROUTING (policy ACCEPT 23663 pac