Sorry, there are a couple of probably obvious errors in my post, aside from the bad numbering. This is because when I first wrote this, I gave the DMZ special hosts routing table the name "MYDMZ", but then changed it to "DMZSPECIAL", for clarity. The erred lines are corrected below: On Thu, 12 Jan 2012 17:08:08 -0600, Lloyd Standish <lloyd@xxxxxxxxxxxxx> wrote:
2. You would set up a custom routing table for the special DMZ traffic. Use the info in the above link to do that. Suppose it is called "DMZSPECIAL". You will set up routing to the new DMZ interface using the MYDMZ table, something like this:
I meant to say above, "...using the DMZSPECIAL table, something like this:" <snip>
Then add a policy routing rule, directing all traffic with the "1" mark to the new DMZ uplink: ip rule add fwmark 1 table MYDMZ
This should of course be: ip rule add fwmark 1 table DMZSPECIAL -- Lloyd -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
