Re: fwmarks

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thanks Thomas, it really help your commnent..still doesnt work :( but i think where the problem is..but i couldnt workit out.

i wanted to the where to things:

1) make transparent squid paquets (which i asume they are generated in the linux box) being routed to the gw i choose. it seems that as i have only one deafault gw, when squid generate the paquets it takes that address as src address and thats why, even i fwmark rules and stuff, that doesnt work..

2) make internal network paquets (wich are mascararaded throght my default gw) -remember even when i have two gateway i only masquerde paquts through one of them- use the another interface, thats why i do fwmark on prerouting and now (thanks thomas) it works, but as masquerading is not appyled (i dont know why!) paquets only go, but never come back..

any sugestion?
thank you really much!!!!!!
help needed!


all conf and stuff is in: http://www.dejawu.com.ar/net.html


> > and then
> > echo 201 www.out >> /etc/iproute2/rt_tables
> > ip rule add fwmark 2 table www.out
> > ip route add default gw via 1.1.1.1 dev ppp0
> > ip route flush cache
> >
> > and does not work!.
> > if i create a rule like
> > ip rule add to 2.2.2.2 table www.out
> > ip route flush cache
> >
> > that does work!..
> 
> Set [I guess location but key is to turn of rpfilter when using
> policyrouting via fwmark]:
> echo "0" > /proc/sys/net/ipv4/conf/ppp0/rp_filter
> 
> Regards
> tw
> -- 
> 
> ----------------
>  ck.eter.tym.pl
> 
> "Never let shooling disturb Your education"
> 
> 
-- 
Slds.


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux