bert hubert wrote:
>
> On Wed, Sep 26, 2001 at 02:05:42PM -0400, Adrian Chung wrote:
>
> > If this machine is also running daemons, does it send replies back out
> > the same interface they came in on? That'll break a lot of things if
> > you receive packets via ISP1, and send replies back via ISP2.
>
> That sometimes happens - policy routing can help with that problem:
>
> $ ip rule ls
> 0: from all lookup local
> 32765: from 213.156.3.162 lookup pine
> 32766: from all lookup main
> 32767: from all lookup default
>
> $ ip route ls
> 195.190.241.81 dev ppp0 proto kernel scope link src 194.109.252.152
> 213.156.3.160/28 dev eth1 proto kernel scope link src 213.156.3.162
> 10.0.0.0/24 dev eth0 proto kernel scope link src 10.0.0.150
> 192.168.0.0/24 dev eth2 proto kernel scope link src 192.168.0.1
> default via 195.190.241.81 dev ppp0
>
> $ ip route ls table pine
> default via 213.156.3.161 dev eth1
Don't you need all the interface specific routes also in table 'pine'?
It seems to me that if you don't have them, all packets from
213.156.3.162 would go out eth1, even those destined to 192.168.0.0/24
(which should go out eth2 in your example)...
Juri
--
If each of us have one object, and we exchange them,
then each of us still has one object.
If each of us have one idea, and we exchange them,
then each of us now has two ideas.
