director:~# iptables -L -t filter
Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
LOG        all  --  127.0.0.0/8          anywhere            LOG level warning
DROP       all  --  127.0.0.0/8          anywhere
ACCEPT     all  --  anywhere             255.255.255.255
ACCEPT     all  --  10.0.0.0/16          anywhere
ACCEPT    !tcp  --  anywhere             BASE-ADDRESS.MCAST.NET/4
LOG        all  --  10.0.0.0/16          anywhere            LOG level warning
DROP       all  --  10.0.0.0/16          anywhere
LOG        all  --  10.0.0.0/16          anywhere            LOG level warning
DROP       all  --  10.0.0.0/16          anywhere
ACCEPT     all  --  anywhere             255.255.255.255
ACCEPT     all  --  anywhere             255.255.255.255
ACCEPT     all  --  anywhere             192.168.1.30
ACCEPT     all  --  anywhere             192.168.1.255
ACCEPT     all  --  anywhere             192.168.28.37
ACCEPT     all  --  anywhere             192.168.28.255
LOG        all  --  anywhere             anywhere            LOG level warning
DROP       all  --  anywhere             anywhere

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  10.0.0.0/16          anywhere
ACCEPT     all  --  10.0.0.0/16          anywhere
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
LOG        all  --  anywhere             10.0.0.0/16         LOG level warning
DROP       all  --  anywhere             10.0.0.0/16
LOG        all  --  anywhere             10.0.0.0/16         LOG level warning
DROP       all  --  anywhere             10.0.0.0/16
LOG        all  --  anywhere             anywhere            LOG level warning
DROP       all  --  anywhere             anywhere

Chain OUTPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             255.255.255.255
ACCEPT     all  --  anywhere             10.0.0.0/16
ACCEPT    !tcp  --  anywhere             BASE-ADDRESS.MCAST.NET/4
LOG        all  --  anywhere             10.0.0.0/16         LOG level warning
DROP       all  --  anywhere             10.0.0.0/16
LOG        all  --  anywhere             10.0.0.0/16         LOG level warning
DROP       all  --  anywhere             10.0.0.0/16
ACCEPT     all  --  anywhere             255.255.255.255
ACCEPT     all  --  anywhere             255.255.255.255
ACCEPT     all  --  192.168.1.30         anywhere
ACCEPT     all  --  192.168.1.255        anywhere
ACCEPT     all  --  192.168.28.37        anywhere
ACCEPT     all  --  192.168.28.255       anywhere
LOG        all  --  anywhere             anywhere            LOG level warning
DROP       all  --  anywhere             anywhere

director:~# iptables -L -t nat
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
MASQUERADE  all  --  10.0.0.0/16          anywhere
MASQUERADE  all  --  10.0.0.0/16          anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

director:~# ip rule
0:      from all lookup local
10:     from 192.168.1.30 lookup inet_sbc
10:     from 192.168.28.37 lookup inet_tw
32766:  from all lookup main
32767:  from all lookup default

director:~# ip route show table local
broadcast 192.168.1.0 dev inet_sbc  proto kernel  scope link  src 192.168.1.30
broadcast 127.255.255.255 dev lo  proto kernel  scope link  src 127.0.0.1
local 10.0.28.1 dev lan  proto kernel  scope host  src 10.0.28.1
broadcast 10.0.0.0 dev lan  proto kernel  scope link  src 10.0.28.1
broadcast 192.168.28.255 dev inet_tw  proto kernel  scope link  src 192.168.28.37
broadcast 192.168.1.255 dev inet_sbc  proto kernel  scope link  src 192.168.1.30
local 192.168.28.37 dev inet_tw  proto kernel  scope host  src 192.168.28.37
broadcast 10.255.255.255 dev lan  proto kernel  scope link  src 10.0.28.1
broadcast 10.0.255.255 dev lan  proto kernel  scope link  src 10.0.28.1
broadcast 127.0.0.0 dev lo  proto kernel  scope link  src 127.0.0.1
broadcast 192.168.28.0 dev inet_tw  proto kernel  scope link  src 192.168.28.37
local 127.0.0.1 dev lo  proto kernel  scope host  src 127.0.0.1
local 192.168.1.30 dev inet_sbc  proto kernel  scope host  src 192.168.1.30
local 127.0.0.0/8 dev lo  proto kernel  scope host  src 127.0.0.1

director:~# ip route show table inet_sbc
192.168.1.0/24 dev inet_sbc  proto kernel  scope link  src 192.168.1.30
default via 192.168.1.1 dev inet_sbc

director:~# ip route show table inet_tw
192.168.100.1 dev inet_tw  scope link  src 192.168.28.37
192.168.28.0/24 dev inet_tw  proto kernel  scope link  src 192.168.28.37
default via 192.168.28.1 dev inet_tw

director:~# ip route show table main
192.168.100.1 dev inet_tw  scope link  src 192.168.28.37
192.168.1.0/24 dev inet_sbc  proto kernel  scope link  src 192.168.1.30
192.168.28.0/24 dev inet_tw  proto kernel  scope link  src 192.168.28.37
10.0.0.0/16 dev lan  proto kernel  scope link  src 10.0.28.1
default equalize
        nexthop via 192.168.28.1  dev inet_tw weight 1
        nexthop via 192.168.1.1  dev inet_sbc weight 1

director:~# ip route show table default