🚀 go-pugleaf

Greetings,

In an attempt to build a redhat6.0-based firewall, I have run into a little
snag.  A little background if I may...

With the purchase of my adsl modem, I also contracted for two static IP
addresses.  This adsl modem attaches to a hub, which in turn eth0 & eth1
within my firewall, attach to the same hub.  I loaded pppd using a pppoe
client bound to eth0 & eth1, and have aquired these static IP addresses
successfully.

On the other side of the firewall, is eth2 & eth3, which are connected to
two hubs, with servers in between, for load balancing and dual-homing
capabilities, with one segment being 192.168.1.0 and the second segment
being 192.168.2.0.  Here is the snippet of firewall code I am having
problems with...

# http (80) & forward to 192.168.x.10
$IPCHAINS -A input -p tcp -s $REMOTENET -d $LOCALNET 80 -j ACCEPT
$IPMASQADM portfw -a -P tcp -L $LOCALIP1 80 -R 192.168.1.10 80 -p 1
$IPMASQADM portfw -a -P tcp -L $LOCALIP1 80 -R 192.168.2.10 80 -p 2

# http (80) & forward to 192.168.x.11
#$IPCHAINS -A input -p tcp -s $REMOTENET -d $LOCALNET 80 -j ACCEPT
$IPMASQADM portfw -a -P tcp -L $LOCALIP2 80 -R 192.168.1.11 80 -p 1
$IPMASQADM portfw -a -P tcp -L $LOCALIP2 80 -R 192.168.2.11 80 -p 2

The first section works just fine, with the $LOCALIP1 representing the first
static IP address.  The second section, which 'should' be forwarding the
second static IP ($LOCALIP2) to the second webserver, is not working
properly.  I've tried several things and unfortunately, its not working at
all.  I thought maybe the webserver itself was misconfigured, but if I
replace the 192.168.x.11 with .x.10, it still doesn't work off the second
IP.  The first webserver off the first static IP, works regardless what I
change on the second set of commands.

Any ideas?  Maybe a default gateway problem?  I am unsure how to proceed,
and was hoping one of you more experienced folks could point me in the right
direction.

Thanks in advance, and direct replies certainly welcomed!

Frederic Breitwieser
Linux Disadvantaged :)