#IP ROUTE & RULES ip route add $ADSLNET dev $ADSLIF src $ADSLIP table T1 ip route add default via $ADSLGW table T1 ip route add $GSHDSLNET dev $GSHDSLIF src $GSHDSLIP table T2 ip route add default via $GSHDSLGW table T2 ip rule add fwmark 1 table T1 ip rule add fwmark 2 table T2 ip rule add from $ADSLIP table T1 ip rule add from $GSHDSLIP table T2 ip route add $INTNET dev $INTIF table T1 ip route add $GSHDSLNET dev $GSHDSLIF table T1 ip route add 127.0.0.0/8 dev lo table T1 ip route add $INTNET dev $INTIF table T2 ip route add $ADSLNET dev $ADSLIF table T2 ip route add 127.0.0.0/8 dev lo table T2 //IPTABLES $IPTABLES -A FORWARD -j ACCEPT $IPTABLES -t nat -A POSTROUTING -j MASQUERADE $IPTABLES -t nat -A PREROUTING -p tcp --dport 80 -j DNAT --to $INTIP:3128 $IPTABLES -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 3128 iptables -t mangle -A PREROUTING -p udp --dport 5004:5082 -j MARK --set-mark 2 iptables -t mangle -A PREROUTING -p udp --dport 5004:5082 -j RETURN iptables -t mangle -A PREROUTING -p udp --dport 10000:11000 -j MARK --set-mark 2 iptables -t mangle -A PREROUTING -p udp --dport 10000:11000 -j RETURN iptables -t mangle -A OUTPUT -p tcp --dport 8080 -j MARK --set-mark 1 iptables -t mangle -A OUTPUT -p tcp --dport 8080 -j RETURN iptables -t mangle -A OUTPUT -p tcp --dport 8080 -j MARK --set-mark 1 iptables -t mangle -A OUTPUT -p tcp --dport 8080 -j RETURN iptables -t mangle -A PREROUTING -j MARK --set-mark 1 iptables -t mangle -A PREROUTING -j RETURN pbx:~# ip route show table T1 XX.XXX.73.0/29 dev eth1 scope link 10.0.0.0/24 dev eth0 scope link 192.168.2.0/24 dev eth2 scope link src 192.168.2.15 127.0.0.0/8 dev lo scope link default via 192.168.2.1 dev eth2 pbx:~# ip route show table T2 XX.XXX.73.0/29 dev eth1 scope link src XX.XXX.73.2 10.0.0.0/24 dev eth0 scope link 192.168.2.0/24 dev eth2 scope link 127.0.0.0/8 dev lo scope link default via XX.XXX.73.1 dev eth1 pbx:/etc/apache2# ip route show XX.XXX.231.120/29 dev eth0 proto kernel scope link src XX.XXX.231.122 10.0.0.0/24 dev eth1 proto kernel scope link src 10.0.0.1 192.168.2.0/24 dev eth2 proto kernel scope link src 192.168.2.15 default via XX.XXX.231.121 dev eth0 default via 192.168.2.1 dev eth2 pbx:/etc/apache2# ip rule show 0: from all lookup 255 32764: from XX.XXX.231.122 lookup T2 32765: from 192.168.2.15 lookup T1 32766: from all lookup main 32767: from all lookup default