Comments on: Extending tc and iproute2. Linux routing split access multiple uplinks multiple isps iptables masquerading http://www.adamsinfo.com/extending-tc-and-iproute2-linux-routing-split-access-multiple-uplinks-multiple-isps-iptables-masquerading/ Adam Palmer MBCS CITP, Linux, PHP Programmer, MySQL Developer, Embedded Hardware, Security Consultant Mon, 15 Mar 2010 13:13:43 +0000 http://wordpress.org/?v=2.8.4 hourly 1 By: netfilter/iptables split access with multiple ISPs | Adam Palmer, Linux, PHP Programmer, MySQL Developer, Embedded Hardware, Security Consultant http://www.adamsinfo.com/extending-tc-and-iproute2-linux-routing-split-access-multiple-uplinks-multiple-isps-iptables-masquerading/comment-page-1/#comment-1188 netfilter/iptables split access with multiple ISPs | Adam Palmer, Linux, PHP Programmer, MySQL Developer, Embedded Hardware, Security Consultant Wed, 10 Feb 2010 02:43:01 +0000 http://www.adamsinfo.com/?p=20#comment-1188 [...] Quite a while back, I posted article http://www.adamsinfo.com/extending-tc-and-iproute2-linux-routing-split-access-multiple-uplinks-multi... [...] [...] Quite a while back, I posted article http://www.adamsinfo.com/extending-tc-and-iproute2-linux-routing-split-access-multiple-uplinks-multi... [...]

]]> By: Adam Palmer http://www.adamsinfo.com/extending-tc-and-iproute2-linux-routing-split-access-multiple-uplinks-multiple-isps-iptables-masquerading/comment-page-1/#comment-1143 Adam Palmer Mon, 11 Jan 2010 13:20:41 +0000 http://www.adamsinfo.com/?p=20#comment-1143 Hi Ali, I haven't had issues with SSL with this setup, although I have had issues with MSN before. I suspect that this is because there are a number of different remote IPs involved in the login, negotiation and conversation aspects of MSN, and MSN's servers seeing these coming from different IPs on your end is the likely cause of the issues. There are two options, neither of them are ideal. Gather all IPs of MSN's servers, they should be available on a few google searches, and add manual routes for all of these out of one of the two connections only. Alternatively, use something like this http://www.adamsinfo.com/multithreaded-multi-connection-tcp-proxy-tunnel-update/ to connect through a remote server and present a single IP to the outside world. Hi Ali, I haven’t had issues with SSL with this setup, although I have had issues with MSN before. I suspect that this is because there are a number of different remote IPs involved in the login, negotiation and conversation aspects of MSN, and MSN’s servers seeing these coming from different IPs on your end is the likely cause of the issues.

There are two options, neither of them are ideal. Gather all IPs of MSN’s servers, they should be available on a few google searches, and add manual routes for all of these out of one of the two connections only. Alternatively, use something like this http://www.adamsinfo.com/multithreaded-multi-connection-tcp-proxy-tunnel-update/ to connect through a remote server and present a single IP to the outside world.

]]> By: ali http://www.adamsinfo.com/extending-tc-and-iproute2-linux-routing-split-access-multiple-uplinks-multiple-isps-iptables-masquerading/comment-page-1/#comment-1142 ali Mon, 11 Jan 2010 11:42:52 +0000 http://www.adamsinfo.com/?p=20#comment-1142 Hi Adam, Does the above setup give you trouble with things like SSL(banking sites) or MSN? If so, is there a workaround for it? Thanks Hi Adam,

Does the above setup give you trouble with things like SSL(banking sites) or MSN? If so, is there a workaround for it?

Thanks

]]>