Asymmetrical (dual interface) network
 

I have two connections to the outside that I would like to use. One is a rather slow 128k iDSL line (eth0) with static IPs that I have no restrictions on from the ISP. The second is a 3000/256k Cable line that has inbound port 80 blocked (eth1). I have a web site that gets very little traffic but would like to have a faster 256k upload of the cable than the 128k that I currently use on IDSL and still keep my domain. What I was thinking of doing is having the web server listen on that iDSL line but return the traffic out the faster cable line.

I tried to first setup the default route as going to the cable (eth1) but this seems to break any redirects. So if someone hits a link off the first page that directs the request to the FQDN it tries to route the request to the interface with the default gw (eth1) and not the static IP that should resolve to the actuall host (eth0). Another way to put it, if I then do a lookup on the FQDN of the host I will now spit back an IP from the cable company and not the actuall IP that DNS would provide.

Let me know if that didn't make sense. I feel like I'm missing something that should be simple. The only thing I don't expect to get to work with this is SSL or SSH connections and that's okay in this situation (I think).

This won't work because software firewalls like zonealarm will detect this as an attack

-Joey

So how does ZoneAlarm deal with web pages that pull their photos or much of their content as URLs from alternate locations? Or even web pages with ads?