Re: Splitting locally generated traffic based on destination port

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, Aug 31, 2002 at 09:46:31PM +0200, Miernik wrote:
> On Sat, 31 Aug 2002, Arthur Donkers wrote:
> 
> > I have added a table mail.out to /etc/iproute2/rt_tables and defined rules
> > like this:
> >
> > ip rule add fwmark 1 table mail.out
> > ip route add default via <gw on eth0 network> dev eth0 src <eth0>
> >
> > And when I do this:
> >
> > telnet <mailhost> 25
> >
> > I indeed see a SYN packet coming out of eth0 to <mailhost>, and a SYN/ACK
> > packet comes back. The problem is that it appears that the Linux box does
> > not see this SYN/ACK packet and resends the SYN packet after a few
> > seconds, which again is answered by a SYN/ACK and this goes on a few
> > times. No other packet filters are active on the Linux box (yet).
> 
> Try:
> 
> echo "0" > /proc/sys/net/ipv4/conf/eth0/rp_filter
> 
> If it works, to make it permanent, include this line in your
> /etc/sysctl.conf file:
> 
> net/ipv4/conf/eth0/rp_filter = 0

thanks ! this works !

grtz,

Arthur

> 
> -- 
> Miernik              _____________________________________
>                     /   /
> tel.: +48603070983 /   /  mailto:miernik@ctnet.pl
> __________________/___/  ICQ UIN: 4004001
--
/* Disclaimer :   you hire my skills, not my opinions, those are mine !    */
/* email : arthur@reseau.nl    Security    'Me ? I'm not me ! I'm just a   */
/* phone : (+31) 50 549 2701   is not a     computer simulation of me'     */
/* URL http://www.reseau.nl   dirty word      Red Dwarf, First Episode     */
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux