Keep in mind that turning off rp filter means that packets which match an IP for any interface will be accepted on all.
That is why I suggested OBSD.
Not so bad if you're on MTS as they'll block before the tunnel, But ive ran into issues with someone on shaw with a misconfigured router.
Ofcourse if you use iptables properly the likelyhood of someone getting source and dest is pretty low..
Rob
Wow, that is a winning reply! Thanks, Trevor.
Hartmut SagerOn 31 March 2013 02:47, Trevor Cordes <trevor@tecnopolis.ca> wrote:
On 2013-03-29 Hartmut W Sager wrote:
> Now THIS should get a discussion going. What's the latest on
> load-balancing / dual-WAN / multi-WAN routers? I only see two kinds
> - some very old D-Link (DI-LB604) and Cisco (RV042, RV082, RV016)
> models, and quite a few current models from completely unheard of
> Oriental companies.
I've done multi-homed Linux routers. To do weird stuff without buying
major expensive gear (read: Cisco enterprise, Juniper, etc) your best
bet is to just do it in Linux (or BSD if you prefer, though I have no
experience there).
You can select what traffic should go out what modem (by nearly any
criteria since it is iptables based). I usually select it based on
port (put VNC, ssh over low-latency pipes) or intranet IP (give certain
machines fast / slow internet). Return packets come in the same modem
as the outgoing.
I haven't yet done automatic failover but it should be fairly easy to
write a script to detect pipe failure and tweak iptables to direct all
traffic out just one pipe.
Your friends here are:
ip rule ... table
ip route ... table
iptables
echo 0 > /proc/sys/net/ipv4/conf/eth0/rp_filter
iptables -t mangle
tc
(and maybe more I'm forgetting, this is from memory at the moment!)
and you can do QoS fairly easily at the same time.
_______________________________________________
Roundtable mailing list
Roundtable@muug.mb.ca
http://www.muug.mb.ca/mailman/listinfo/roundtable
_______________________________________________
Roundtable mailing list
Roundtable@muug.mb.ca
http://www.muug.mb.ca/mailman/listinfo/roundtable