Re: Using iptables on a single NIC to map old IP addresses onto new.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



	Terve,


On Fri, 20 Jan 2006, Yermo Lamers wrote:

> That was my first thought. I bound a.a.a.2 and b.b.b.2 to the same box.
> I obviously have two pipes. If I set the default route on the box to the
> a.a.a.1 router I can ping a.a.a.2 from the outside but not b.b.b.2. If I
> switch to the b.b.b.1 router the opposite happens.

> I would have expected packets to come down either pipe and go out
> whichever one happens to be the default gateway.

	It could be that both your ISPs are using source address spoofing
	filters (as they should, of course). That is, the router a.a.a.1
	will only accept traffic with source address a.a.a.2 and the rest
	(including ping replies from b.b.b.2) get dropped.


	Ville

-- 
Ville Mattila, System Support Specialist, Funet network, CSC
PO Box 405, FIN-02101 Espoo, Finland, fax +385 9 457 2302
CSC is the Finnish IT Center for Science, http://www.csc.fi/, email:
ville.mattila@xxxxxx

Attachment: pgp7og2fTqKDV.pgp
Description: PGP signature


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux