Sali Thomas Hmm, not sure if I got it right. Here's what I have with the real addresses and interfaces. Not trying to mangle the tunnels yet :-) eth0 is connected to the internet. eth1 is lan. Before: magma:~# ip route 157.161.57.0/27 dev eth1 proto kernel scope link src 157.161.57.1 157.161.32.0/21 dev eth0 proto kernel scope link src 157.161.34.64 default via 157.161.32.1 dev eth0 Well I don't want to see replies from 157.161.34.64 going out via UDP when something is addressed to 157.161.57.1. After the change: magma:~# ip route 157.161.57.0/27 dev eth1 proto kernel scope link src 157.161.57.1 157.161.32.0/21 dev eth0 scope link src 157.161.57.1 default via 157.161.32.1 dev eth0 That looks promising, but does not seam to have any inpact. I still see the packets originating from 157.161.32.1 Any idea? -Benoit-
Attachment:
pgp1SQnAjEKTv.pgp
Description: PGP signature