[LARTC] Source routing, sort of

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I have a system with two interfaces, eth0 is on the Internet, eth1 on 
an internal connection.  Because of using ipsec and its internal 
routing, I need certain connections to be made from the internal 
interface that will be going out over the ipsec0 device.

For example:
eth0: 1.2.3.4 (internet address)
ipsec0: 1.2.3.4 (always the same as the external interface)
eth1: 192.168.0.1 (internal address)

ping -n 192.168.1.1 (over VPN) attempts to send a ping from 1.2.3.4 
because ipsec0's interface address is 1.2.3.4.  How can I get arbitrary 
connects, based on destination, to be sourced from 192.168.0.1 instead 
of 1.2.3.4?

I'm assuming some basic source NATting is required; off to read the
docs again ... 
-- 
Michael T. Babcock
CTO, FibreSpeed Ltd.     (Hosting, Security, Consultation, Database, etc)
http://www.fibrespeed.net/~mbabcock/



[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux