Re: SNAT problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Yevgeny Kosarzhevsky a écrit :
> 
> I have two interfaces, let's say ppp0 - x.x.x.x, ppp1 - y.y.y.y ppp0 is 
> a default gateway.
> I use some command to change routing to IP z.z.z.z via ppp1:
> ip ro ad to z.z.z.z dev ppp1
> 
> I have SNAT rules for both interfaces, however, I notice with tcpdump 
> that outgoing packets are still using x.x.x.x instead of y.y.y.y IP, 
> though packets are being sent with the correct interface (ppp1)
> 
> I have shut down ppp0 and removed SNAT rule for it, but outgoing packets 
> are still showing x.x.x.x IP. Even, ip ro fl cache didn't help.

If the packets belong to an existing connection (conntrack-wise) which
was established before the route change, this behaviour is expected.
Changing the source address may break the connection.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux