I have two public IPs. One's connected to eth0 and one to eth1, from 2 separate routers as complete DMZ towards the LAN IP.
I added this following:
ip rule add from 10.0.0.108/32 table 1 # outboundip rule add to 10.0.0.108/32 table 1 # inboundip route add default via 10.0.0.1 dev eth0 table 1ip rule add from 10.0.0.100/32 table 2 # outboundip rule add to 10.0.0.100/32 table 2 # inboundip route add default via 10.0.0.1 dev eth1 table 2
Since adding this above, I've been having problems sending traffic correctly for inbound and outbound.
For example:
$ ping -I eth0 8.8.8.8PING 8.8.8.8 (8.8.8.8) from 10.0.0.108 eth0: 56(84) bytes of data.From 10.0.0.108 icmp_seq=2 Destination Host UnreachableFrom 10.0.0.108 icmp_seq=3 Destination Host UnreachableFrom 10.0.0.108 icmp_seq=4 Destination Host Unreachable$ ping -I eth1 8.8.8.8PING 8.8.8.8 (8.8.8.8) from 10.0.0.28 eth1: 56(84) bytes of data.64 bytes from 8.8.8.8: icmp_seq=1 ttl=48 time=14.6 ms64 bytes from 8.8.8.8: icmp_seq=2 ttl=48 time=14.6 ms^C--- 8.8.8.8 ping statistics ---2 packets transmitted, 2 received, 0% packet loss, time 1233msrtt min/avg/max/mdev = 14.611/14.639/14.667/0.028 ms
How do I use ip rule add from/to
method to fix the eth0 (from/to), but without breaking the eth1 (eth1 is working perfect).