From: Ramin Dousti <ramin@cannon.eng.us.uu.net>
To: Thhoep <thhoep@gmx.de>
Cc: netfilter@lists.netfilter.org
Subject: Re: Iproute2 and fwmark usage
Date: Fri, 9 Jan 2004 12:35:30 -0500 [thread overview]
Message-ID: <20040109173530.GC24304@cannon.eng.us.uu.net> (raw)
In-Reply-To: <001d01c3d6cc$191fc210$1684188d@Kiste>
On Fri, Jan 09, 2004 at 05:17:36PM +0100, Thhoep wrote:
> if using the inbuilt "ip rule add from .." directive of iproute for advanced
> routing everything is working fine. but if i try to use netfilter marks to
> do the exact same thing using "ip rule add fwmark ..." outgoing packets find
> their way through my routing stuff and out of the net, but incoming replies
> just get lost between PREROUTING and FORWARD, probably during the routing
> process, for just no reason and without any icmp error messages or
> something.
OK. You mean when doing MARK in mangle for ping a -> b, you see both
ping and pong on ppp4 but the pongs get dropped somewhere between
PREROUTING and FORWARD. When you remove the MARK from netfilter then
all works fine??
Instead of "iptables -L..." can you send the exact commands you enter
from scratch for both netfilter and iproute2 instructions? "iptables -L..."
wraps the lines and is hard to read for me and also doesn't show you all the
actions taken (or at least I have difficulty interpretting them).
Just make sure that you start from scratch and a clean setup.
Ramin
next prev parent reply other threads:[~2004-01-09 17:35 UTC|newest]
Thread overview: 19+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-01-08 23:05 Iproute2 and fwmark usage Thhoep
2004-01-09 16:47 ` Ramin Dousti
2004-01-09 16:17 ` Thhoep
2004-01-09 17:35 ` Ramin Dousti [this message]
2004-01-09 16:50 ` Thhoep
2004-01-09 19:42 ` Ramin Dousti
2004-01-09 19:06 ` Thhoep
2004-01-09 20:47 ` Ramin Dousti
2004-01-09 20:09 ` Thhoep
2004-01-09 21:22 ` Ramin Dousti
2004-01-09 21:30 ` Thhoep
2004-01-09 22:02 ` Thhoep
2004-01-11 20:57 ` Thhoep
2004-01-11 21:07 ` Antony Stone
2004-01-11 21:50 ` Thhoep
2004-01-11 23:12 ` Thhoep
2004-01-11 23:22 ` Antony Stone
2004-01-13 23:46 ` Thhoep
-- strict thread matches above, loose matches on Subject: below --
2004-01-08 14:20 Filter out broadcast messages Gabby James
2004-01-08 14:31 ` iproute2 and fwmark usage Thhoep
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040109173530.GC24304@cannon.eng.us.uu.net \
--to=ramin@cannon.eng.us.uu.net \
--cc=netfilter@lists.netfilter.org \
--cc=thhoep@gmx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.