MI have two interfaces on an ipcop machine, eth1 (public) and eth0 (local LAN). Transparent SQUID is listening and caching on eth0, and all traffic is routed from there across eth1 for public web access. As the eth1 is getting too slow, I want to split certain endpoint traffic via different DSL gateways.
Current eth0 is 192.168.1.1, eth1 is dynamic.
I've created eth0:0 as 192.168.50.1 and have set SQUID's tcp_outgoing_connection to 192.168.50.1. The DSL router IP is 192.168.50.250.
I've added the route for 192.168.50.0/24 to be 192.168.50.250.
I can ping external servers via this route, but don't get any traffic back via squid (I can see the connection outgoing from 192.168.50.1:800 to 184.108.40.206 but it stops there).
On eth0 all traffic is allowed across the eth0-network.
What am I missing? What iptables / route settings must I change? Do I need postroute masquerading?
Using a desktop machine, I can browse at will with 192.168.50.250 as my gateway.
I can't use iproute2 or any of those options...