advanced routing policies

[Matteo Cisilino <matteo@cisilino.com>]

Hi all, i hope that this question is posted in the right place.

I need to reach a network from 2 netwroks sources

A firewall with DMZ 

Green : 172.X.1/16
Orange :172.Y.1/16
RED : xxx.xxx
openvpn

B firewall dedicated to ipsec 

green 172.X.2/16
red : xxx.xxx
ipsec

I need that the two networks 172.X and 172.Y reach 192.168/20 that's in the 
other side of the two vpns but, the Y network must reach the other side 
directly via the firewall A.

The firewall A has a static route to 192.168 ( and must stay that way ) via 
firewall B.

Not i'm out of mind how to mark the traffic from the source, to selec wich 
gateway to use.

Hope this can be easy to understand , bcouse it's not so simple to explain 
( my English is quite basic )

Regards
Matteo C.