Re: CONNTRACK problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, May 31, 2005 at 02:05:17PM +0200, Rodolphe AVERTY wrote:
> Hello,
> 
> i have two router connected to the internet and i want to send my tcp connection between them.
> 
> this is my iptables script :
> 
> ############################################################################
> iptables -t mangle -N INTERNET
> iptables -t mangle -N INTERNET_ROUTER_1
> iptables -t mangle -N INTERNET_ROUTER_2
> 
> #le paquet est t'il en direction d'internet
> iptables -o eth2 -t mangle -A POSTROUTING -p tcp -d ! 10.0.0.0/8 -j INTERNET

you are trying to use fwmark's as a key in the routing decision; yet
you are MARK-ing in the mangle POSTROUTING chain, POST meaning "after"
and ROUTING meaning "routing."  you'd be better served to place these
rules in the mangle PREROUTING chain; PRE meaning "before" and ROUTING
meaning "routing."

-j

--
"Peter: I only drank so that the Statue Of Liberty would take her
 clothes off."
        --Family Guy


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux