[FUGSPBR] Erro / Dúvida para dividrtráfego em 2 links

[Diego Linke - GAMK]

Olá

> Diego,
> Criei o arquivo abaixo com as regras seguindo o seu artigo,  porém não
> funcionou:
> 
> meu nat está assim
> natd -s -f  /etc/natd.conf -n rl1 -p 8668
> natd -s -n rl3 -p 8669
> 
> -ipfw -f flush
> 
> #rl0 (Rede Interna):
> #IP: 192.168.44.1
> #REDE: 192.168.44.0/24
> 
> #rl1 (Router Adsl 1):
> #IP: 192.168.200.5
> #Gateway: 192.168.200.254
> 
> #rl3 (Router Adsl 2):
> #IP: 192.168.7.10
> #Gateway: 192.168.7.1
> 
> -ipfw add 510 divert 8669 ip from any to 192.168.7.1 in via rl3
> -ipfw add 520 divert 8669 tcp from 192.168.44.0/24 to any 80 out via rl1
> -ipfw add 530 fwd 192.168.7.1 ip from 192.168.7.10 to any
> 
> -ipfw add 700 divert 8668 ip from any to 192.168.200.5 in via rl1
> 
> -ipfw add 1000 allow ip from any to any via lo0
> -ipfw add 2000 deny ip from any to 127.0.0.0/8
> 
> -ipfw add 65000 allow ip from any to any
> 

Considerando que o gateway padrão é 192.168.200.254
E considerando a politica que tudo sai pelo Link da rl1 porem apenas trafego TCP/80 sai pelo rl3.

Tente estas regras de IPFW:

ipfw add divert 8669 ip from any to 192.168.7.10 in recv rl3
ipfw add divert 8669 tcp from 192.168.44.0/24 to any 80 out xmit rl1
ipfw add fwd 192.168.7.1 ip from 192.168.7.10 to any
ipfw add divert 8668 ip from any to 192.168.200.5 in recv rl1
ipfw add divert 8668 ip from 192.168.44.0/24 to any out xmit rl1

Abraços

--
[ Diego Linke - GAMK ]
System/Network/Security Administrator
E-Mail/Site: gamk em gamk.com.br - http://www.gamk.com.br
Public Key: http://www.gamk.com.br/gamk.asc
Phone Number: (+5541) 8804-4303
** BSD "Where uptime is measured in years" **

_______________________________________________________________
Sair da Lista: http://lists.fugspbr.org/listinfo.cgi
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/