Dont top post, please. Le vendredi 17 septembre 2010 à 19:05 +0200, Nicola Padovano a écrit : > ok man :) > the last question is about fl.nl_u.ip4_u.saddr = 0... > is it a kind of "jolly" selector of the source address? > i.e. if we have a simplified cache route > > SOURCE IP DEST IP NEXT HOP > ips1 google nexthop1 > ips2 google nexthop2 > > with > ...saddr = 0 > ....daddr = google > ....tos =.... > i get nexthop1 or nexthop2. right? Not "or" but exactly one. If you have say 65534 ip addresses on your host (a full /16 network) 192.168.X.Y If you want to send a frame from 182.168.1.2 to google, for sure the route you are going to use is : 192.168.1.2 -> google If you want to send a frame from 182.168.10.20 to google, for sure the route you are going to use is : 192.168.10.20 -> google and not the 192.168.1.2 -> google if you say now : Send a packet to google, please, I dont care of what source address you chose, but I am interested to receive an answer, of course. (application does not use bind() system call, only a send()) Then we look at the routing table given all the keys (for example, the socket FWMARK or TOS value), and choose the primary address of the network device the routes takes to join google. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html