From mboxrd@z Thu Jan 1 00:00:00 1970 From: "John A. Sullivan III" Subject: Re: iptables and iproute Date: Mon, 26 Apr 2004 03:55:20 -0400 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1082966119.19776.1.camel@localhost> References: <1082964013.1772.14.camel@Toshiba.Toshiba> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1082964013.1772.14.camel@Toshiba.Toshiba> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: Antonio Alvarez Cc: netfilter On Mon, 2004-04-26 at 03:20, Antonio Alvarez wrote: > Hello every body! > > I have a machine with 4 ethernet interfaces, 3 directly connected to > ADSL lines a the another one to a LAN. > > I have 3 routing tables with iproute ( each one with his default gw for > each ADSL line ) > > I don't have problems with packet traversing my linux machine ( mangle > the packet in the PREROUTING chain ) to routing. > > The problem is how can i control the packet localy generated( ip and > port )??? > i can't mangle this packet before routing :-/ > > for example a need to use ssh server in the linux machine using ADSL 1 > but when the machime aswer me use the ADSL 3 ( because this is the > default gw in the main routing table :-( ... > > In sumarize it's possible to use different routing tables with packet > generated localy?? I don't recall the syntax off the top of my head but isn't it possible to create a iproute2 rule where iif = lo to route locally generated packets. I believe that's how we do it in the ISCS project. You can check the ISCS training docs at http://iscs.sourceforge.net - John -- Open Source Development Corporation Financially Sustainable open source development http://www.opensourcedevelopmentcorp.com