IPFW - NAT - two gateway -HELP
Nima Khoramdin
nima.gooler at gmail.com
Sun Jan 2 06:42:44 UTC 2011
hello again
ok Maybe I was wrong explain. I already have an ip address in my network is
working with NAT ( nat to internal web server ) , i want to add another NIC
with a new isp (IP) for backup, and new nat rule.
how can i set two separated gateways on freebsd.
thanx
---------- Forwarded message ----------
From: Julian Elischer <julian at freebsd.org>
Date: Sun, Jan 2, 2011 at 4:02 AM
Subject: Re: IPFW - NAT - two gateway -HELP
To: Nima Khoramdin <nima.gooler at gmail.com>
Cc: freebsd-ipfw at freebsd.org
On 1/1/11 5:11 AM, Nima Khoramdin wrote:
> hello .
>
> I installed freebsd 7.1 with ifpw - nat - dummynet with below kernel config
> :
>
> options IPFIREWALL
> options IPFIREWALL_VERBOSE
> options IPFIREWALL_VERBOSE_LIMIT=100
> options IPFIREWALL_FORWARD
> options IPDIVERT
> options DUMMYNET
> options HZ=1000
>
>
> and i have three NICs , with internal webserver works with nat:
>
> default gw : 172.16.1.5
>
> (in natd.conf :
>
> port 8668
> interface nfe0
> use_sockets yes
>
> # redirect to webserver
> redirect_port tcp 192.168.1.121:80 172.16.1.5:80)
> webserver
> )
>
> it works fine.
>
>
> ISP1 ISP2
> wireless connection ADSL
> 2mb/2mb 1mb/1mb
> 172.16.1.1/23 10.0.0.1/23
>
> | |
> | |
> | |
> | |
> static static
> 172.16.1.5 10.0.1.15
> *aue0*******************tun0*
> * FreeBSD *
> *************ep0*************
>
> 192.168.1.254
> |
> |
> *****
> Private LAN
> 192.168.1.0/24
> |
> |
> |
> webserver
>
> 192.168.1.121
>
>
> how to use of this two gateways for my internal webserver with ipfw& nat
>
> i want to know how can i use ISP2 adsl as ISP1 ( i mean if anyone put ISP1
> (172.16.1.5) , ISP2 (10.0.10.15) to the browser , can see my internal
> webserver page with two separated ISPs ) not load balance . i want to use
> two ISPs at the same time .
>
do you REALLY have 172.16.1.5 and 10.0.1.15 as your IP addresses?
If so there is no way you can be reached from the outside..
unless you have made an agreement with the ISPs to forward some address/port
to you.
They are doing NAT on your outgoing sessions as it is already..
sorry for my bad explanation
> thanx
> _______________________________________________
> freebsd-ipfw at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"
>
>
More information about the freebsd-ipfw
mailing list