Hej,
mam sobie taki problem, ze chce, aby czesc ruchu (glownie P2P)
rutowana byla przez interfejs ppp1. "Glowniejszy" defaultroute
jest na ppp0, na ppp1 nie dziala traceroute (ktos ma pomysl,
czemu?), ale polaczyc sie da, ustawiajac recznie regulke
ip route dla siakiegos ip.
Hi,
I have the following problem. I read iptables tutorials,
LARTC, without any clue for solution.
Anyway, I have two interfaces:
tun0 is reliable, fast, but has most P2P blocked on the other side
ppp0 is slower, but is totally non-firewalled.
I would like to use L7 to classify packets as P2P traffic and then
send them to ppp0 instead of tun0 (which is the default route with
higher priority).
Basically, if a packet matches a rule, its source IP should be changed
to one bound to ppp0 and then sent out through ppp0, not tun0.
Unfortunately, I have no idea how to do that.
The closest I got was:
iptables -t nat -A POSTROUTING -p tcp --dport 80 -o tun0 -j SNAT --to-source
1.1.1.1
But this doesn't redirect the packet to another interface, it only changes
the header causing the packet to never come back.
Any help would be appreciated,
--
tomasz k. jarzynka / 601 706 601 / tomee(a-t)kadu(d-o-t)net
"Dla niektórych ludzi wiara jest jedynym powodem aby być przyzwoitym
człowiekiem. (Anonim)"
|