From owner-freebsd-ipfw@FreeBSD.ORG  Sat Jan  1 13:36:34 2011
Return-Path: <owner-freebsd-ipfw@FreeBSD.ORG>
Delivered-To: freebsd-ipfw@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 06EFC1065673
	for <freebsd-ipfw@freebsd.org>; Sat,  1 Jan 2011 13:36:34 +0000 (UTC)
	(envelope-from nima.gooler@gmail.com)
Received: from mail-gx0-f182.google.com (mail-gx0-f182.google.com
	[209.85.161.182])
	by mx1.freebsd.org (Postfix) with ESMTP id B8F7A8FC0A
	for <freebsd-ipfw@freebsd.org>; Sat,  1 Jan 2011 13:36:33 +0000 (UTC)
Received: by gxk8 with SMTP id 8so5204646gxk.13
	for <freebsd-ipfw@freebsd.org>; Sat, 01 Jan 2011 05:36:33 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:mime-version:received:from:date
	:message-id:subject:to:content-type;
	bh=oDua9M18CClRtGMzEKPimNG6hOg51jnxeFD1UD3xrkg=;
	b=Qciyd4ymom1X4IhJcKYCBATfYtEJz/TtyoX5yuiOhA37gwGY856qPHGvfVERqO01o9
	zQYnT0hH8sCvHRtE3QD6g1sDsDA5tlJh4Z2AdkZF6GFEY3UUGEqVBHWTbChmpJnTBucQ
	6xVdwRYRxP2uFpfiQujTwM8wZO0Hg2Ih0xpHc=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=mime-version:from:date:message-id:subject:to:content-type;
	b=RVu8czTHMLKrMN59BokZwQvO6i+v2zYsH4gUXOMJKL7lH/PuVXLd1EE3auZ/k4Wv0F
	ZYfQ2mXB+pP9mf02Ybgj8J7YCwa9SjSRykQY6atKsPy1MmY9Kf0KTaZbPlJgEvvFnQhF
	uMzTN2HoR1afGcOak75Zf6z/5dQ2O99bwGHRM=
Received: by 10.100.201.11 with SMTP id y11mr10987706anf.114.1293887491960;
	Sat, 01 Jan 2011 05:11:31 -0800 (PST)
MIME-Version: 1.0
Received: by 10.100.250.17 with HTTP; Sat, 1 Jan 2011 05:11:11 -0800 (PST)
From: Nima Khoramdin <nima.gooler@gmail.com>
Date: Sat, 1 Jan 2011 16:41:11 +0330
Message-ID: <AANLkTinKTWGOmK9Pu92AgCcgvVHzsh4hD0PvH_1LXRH5@mail.gmail.com>
To: freebsd-ipfw@freebsd.org
Content-Type: text/plain; charset=UTF-8
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: IPFW - NAT - two gateway -HELP
X-BeenThere: freebsd-ipfw@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: IPFW Technical Discussions <freebsd-ipfw.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ipfw>
List-Post: <mailto:freebsd-ipfw@freebsd.org>
List-Help: <mailto:freebsd-ipfw-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw>,
	<mailto:freebsd-ipfw-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 01 Jan 2011 13:36:34 -0000

hello .

I installed freebsd 7.1 with ifpw - nat - dummynet with below kernel config
:

options         IPFIREWALL
options         IPFIREWALL_VERBOSE
options         IPFIREWALL_VERBOSE_LIMIT=100
options         IPFIREWALL_FORWARD
options         IPDIVERT
options         DUMMYNET
options         HZ=1000


and i have three NICs , with internal webserver works with nat:

default gw : 172.16.1.5

(in natd.conf :

port 8668
interface nfe0
use_sockets yes

# redirect to webserver
redirect_port tcp 192.168.1.121:80 172.16.1.5:80)
                                               webserver
)

it works fine.


   ISP1			  ISP2
wireless connection	  ADSL
2mb/2mb	                1mb/1mb
172.16.1.1/23	        10.0.0.1/23

     |			    |	
     |			    |	
     |			    |	
     |			    |	
    static		  static
 172.16.1.5		10.0.1.15
   *aue0*******************tun0*
   *          FreeBSD	       *
   *************ep0*************	

   	 192.168.1.254
  		 | 	
  		 | 	
  	       *****
  	    Private LAN
  	  192.168.1.0/24
                 |
                 |
                 |
             webserver

           192.168.1.121


how to use of this two gateways for my internal webserver with ipfw & nat

i want to know how can i use ISP2 adsl as ISP1 ( i mean if anyone put ISP1
(172.16.1.5) , ISP2 (10.0.10.15) to the browser , can see my internal
webserver page with two  separated ISPs ) not load balance . i want to use
two ISPs at the same time .

sorry for my bad explanation
thanx