IP-Балансировка

sclocal: 4: KadyrovLocal#1=/etc/routing/KadyrovLocal#1.list: not found
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
Failed to send flush request: Operation not permitted
RTNETLINK answers: Operation not permitted
Failed to send flush request: Operation not permitted
RTNETLINK answers: Operation not permitted
Cannot open "/proc/sys/net/ipv4/route/flush"
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
Could not determine whether revision 1 is supported, assuming it is.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
Could not determine whether revision 1 is supported, assuming it is.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
Could not determine whether revision 1 is supported, assuming it is.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
Could not determine whether revision 1 is supported, assuming it is.
iptables v1.4.10: can't initialize iptables table `mangle': Permission
denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
RTNETLINK answers: Operation not permitted
Cannot open "/proc/sys/net/ipv4/route/flush"

mit@mit-S2V ~ $ sudo su
[sudo] password for mit:
mit-S2V mit # bash sclocal
sclocal: line 4: KadyrovLocal#1=/etc/routing/KadyrovLocal#1.list: No
such file or directory
RTNETLINK answers: File exists
RTNETLINK answers: File exists
RTNETLINK answers: Invalid argument
mit-S2V mit # bash sclocal.sh
bash: sclocal.sh: No such file or directory
mit-S2V mit # sh sclocal
sclocal: 4: KadyrovLocal#1=/etc/routing/KadyrovLocal#1.list: not found
RTNETLINK answers: File exists
RTNETLINK answers: File exists
RTNETLINK answers: Invalid argument
mit-S2V mit # sudo sclocal.sh
sudo: sclocal.sh: command not found
mit-S2V mit # bash sclocal.sh
bash: sclocal.sh: No such file or directory
mit-S2V mit # bash sclocal
sclocal: line 4: KadyrovLocal#1=/etc/routing/KadyrovLocal#1.list: No
such file or directory
RTNETLINK answers: File exists
RTNETLINK answers: File exists
RTNETLINK answers: Invalid argument
mit-S2V mit #

#!/bin/sh

################### CONFIG ############
FreeNet="/etc/routing/FreeNet.list"
### Home Network
l_eth=eth2
l_ip=192.168.5.1
l_net=192.168.5.0/24

########### Local ISP Network #########
li_net=10.0.0.0/8

########### ISP1 ######################
i1_eth=eth0
i1_ip=89.252.20.173
i1_net=89.252.20.0/24
i1_gw=89.252.20.1

########### ISP2 ######################
i2_eth=eth1
i2_ip=10.1.2.161
i2_net=10.0.0.0/16
i2_gw=10.1.0.1

#########ip route2 tables##############
t1=101
t2=102
#######################################

########### Flushing ##################
iptables -t mangle -F NEW_OUT_CONN
iptables -t mangle -F PREROUTING
iptables -t mangle -F OUTPUT
iptables -t mangle -X NEW_OUT_CONN
ip route flush table $t2
ip rule del table $t2
ip route flush table $t1
ip rule del table $t1
ip route flush cache
#######################################

iptables -t mangle -N NEW_OUT_CONN
iptables -t mangle -A NEW_OUT_CONN -j CONNMARK --set-mark 1
iptables -t mangle -A NEW_OUT_CONN -m statistic --mode random --probability 0.50 -j RETURN
iptables -t mangle -A NEW_OUT_CONN -j CONNMARK --set-mark 2

for file in $FreeNet; do
if [ -f "$file" ]; then
{ cat "$file" ; echo ; } | while read ip_addr; do
if [ "$ip_addr" != "" ]; then
echo "Статическая маршрутизация для $ip_addr"
iptables -t mangle -A NEW_OUT_CONN -d $ip_addr -j CONNMARK --set-mark 1
fi
done
fi
done

iptables -t mangle -A PREROUTING -d $l_net -j RETURN
iptables -t mangle -A PREROUTING -d $li_net -j RETURN

iptables -t mangle -A PREROUTING -s $l_net -m state --state new,related -j NEW_OUT_CONN
iptables -t mangle -A PREROUTING -s $l_net -j CONNMARK --restore-mark

iptables -t mangle -A OUTPUT -d $l_net -j RETURN
iptables -t mangle -A OUTPUT -d $li_net -j RETURN

iptables -t mangle -A OUTPUT -s $l_net -m state --state new,related -j NEW_OUT_CONN
iptables -t mangle -A OUTPUT -s $li_net -j CONNMARK --restore-mark

ip route add $l_net dev $l_eth scope link table $t1
ip route add $i2_net dev $i2_eth scope link table $t1
ip route add $i1_net dev $i1_eth scope link src $i1_ip table $t1
ip route add 127.0.0.0/8 dev lo scope link table $t1
ip route add default via $i1_gw table $t1

ip rule add prio 51 fwmark 1 table $t1
ip rule add from $i1_ip table $t1

ip route add $l_net dev $l_eth scope link table $t2
ip route add $i1_net dev $i1_eth scope link table $t2
ip route add $i2_net dev $i2_eth scope link src $i2_ip table $t2
ip route add 127.0.0.0/8 dev lo scope link table $t2
ip route add default via $i2_gw table $t2

ip rule add prio 52 fwmark 2 table $t2
ip rule add from $i2_ip table $t2

ip route flush cache