Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Network Security: Firewall, NAT, QoS, IPS and more

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 01-10-2004, 02:19 PM
Member
 
Join Date: Oct 2001
Posts: 70
Default One Gateway DNAT on two Internet Connections

Hi,

I've been reading almost all threads on a configuration with two internet connections.


I understand that it's not possible to route outgoing traffic thru two connections based on services and so on. but I would like to receive server queries on one line and surf using the other line.

The goal: Accept DNS queries on the adsl line (fix ip) doing NAT to an internal DNS server. Surf from internal net to
Internet using cable connection (faster).


The problem I have:

I have two internet connections (ADSL Fix Ip / Cable Dynamic), and I've connected each connection to independent interfaces.

My configuration:
++++++++++++

eth0 -> Internal net (10.0.0.1)

eth1 -> Public Adsl (192.168.1.1) ------> ADSL router 192.168.1.254 ----> Public IP

eth2 -> Public Cable (Dynamic, Public IP)

1) I've told the ADSL router (192.168.1.254) to forward all ports to the astaro "public" IP 192.168.1.1


2) I've enabled masquerading on my internal net 10.0.0.0 for
both internet connections (the default GWY is on the
cable connection only)

3) Filter set: Internal -> Any -> Any Service -> Allow
Any -> Any -> DNS Service -> Allow

4) Dnat : 192.168.1.1 -> DNS -> 10.0.0.253 (DNS Server)

Doing so, I'm allowed to surf from the internal net to Internet
using the cable connection, but the DNAT doesn't work.

To have DNAT work, I have to disable the cable connection
and activate the Gateway for ADSL, then it works fine, but
I have to surf with the ADSL line (slower).

Has anyone any idea on how could i fix this?

thank you in advance!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 10:31 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.