On Sun, Sep 15, 2013 at 8:59 PM, james <commercials24@xxxxxxxx> wrote: > hi, > > when i use these commands to redirect the output from tun0 to ifb0: > > dev=tun0; indev=ifb0; > tc qdisc add dev $dev handle ffff: ingress > tc filter add dev $dev parent ffff: protocol ip prio 1 u32 match u32 0 0 > action \ > mirred egress redirect dev $indev > > i get this tcpdump output: > tcpdump -i ifb0 > tcpdump: WARNING: ifb0: no IPv4 address assigned > > listening on ifb0, link-type EN10MB (Ethernet), capture size 65535 bytes > 22:44:38.333033 00:00:40:01:43:58 (oui Unknown) > 45:00:00:54:23:22 (oui > Unknown), ethertype Unknown (0x0a08), length 84: > 0x0000: 000a 0a08 0016 0000 2e57 39db 0009 361c .........W9...6. > 0x0010: 3652 3c53 0400 0809 0a0b 0c0d 0e0f 1011 6R<S............ > 0x0020: 1213 1415 1617 1819 1a1b 1c1d 1e1f 2021 ...............! > 0x0030: 2223 2425 2627 2829 2a2b 2c2d 2e2f 3031 "#$%&'()*+,-./01 > 0x0040: 3233 3435 3637 234567 > 22:44:39.333253 00:00:40:01:43:57 (oui Unknown) > 45:00:00:54:23:23 (oui > Unknown), ethertype Unknown (0x0a08), length 84: > 0x0000: 000a 0a08 0016 0000 3e52 39db 000a 371c ........>R9...7. > 0x0010: 3652 2b57 0400 0809 0a0b 0c0d 0e0f 1011 6R+W............ > 0x0020: 1213 1415 1617 1819 1a1b 1c1d 1e1f 2021 ...............! > 0x0030: 2223 2425 2627 2829 2a2b 2c2d 2e2f 3031 "#$%&'()*+,-./01 > 0x0040: 3233 3435 3637 234567 > > why dont i get the icmp packets that went into the openvpn tunnel? > and what do i get instead? > > the target is to manage all incoming traffic, but if use eth0 (the real > physical device) as root > all that goes over the vpn connection is already encrypted and encapsulated > by openvpn. > so its all one big blob with dst port 1194. > > is there a better way to manage the traffic that goes to the internet and > the one that goes trough a vpn at one bottleneck? > -- Can you try "protocol all" instead of "protocol ip"?? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
