#!/bin/bash
#Configurações do LINK2
IF_LINK2="eth2"
GW_IF2="189.xxx.x.1"

#Configurando LINK2
IP_IF2=$(/sbin/ifconfig ${IF_LINK2} | awk '/inet addr:/ {print $2}' | cut -d: -f2)
REDE2=$(/usr/sbin/unipmask ${IF_LINK2})

iptables -t nat -A POSTROUTING -o $IF_LINK1 -j MASQUERADE
iptables -t nat -A POSTROUTING -o $IF_LINK2 -j MASQUERADE

iptables -t mangle -A PREROUTING -i $IF_LAN -p tcp --dport 22 -j MARK --set-mark 2
iptables -t mangle -A PREROUTING -i $IF_LAN -p tcp --dport 80 -j MARK --set-mark 2
iptables -t mangle -A PREROUTING -i $IF_LAN -p tcp --dport 443 -j MARK --set-mark 2

#Rotas para servicos marcados com 2 para o LINK2
ip rule add from ${IP_IF2} table 20
ip route add 127.0.0.0/8 dev lo table 20
ip route add ${REDE2} dev ${IF_LINK2} src ${IP_IF2} table 20
ip route add default via ${GW_IF2} dev ${IF_LINK2} table 20
ip rule add fwmark 2 table 20 prio 20

#Atualiza tabela de rotas
ip route flush cache