From: Bartosz <bartek@go3.pl>
To: lartc@vger.kernel.org
Subject: [LARTC] FWMARK ROUTING OVER MULTIPLE ROUTERS/LANS
Date: Sun, 30 Oct 2005 11:25:21 +0000 [thread overview]
Message-ID: <200510301225.21547.bartek@go3.pl> (raw)
I would like to route ssh in my network via DSL2 and all other trafic via
DSL1.
So far I menaged to do it for LAN2 but there are still WLAN1,LAN3 and LAN1 to
go.
On all routers I added table "pilicka" with rule for fwmark and I fwmarked
ssh.
# ip rule show
0: from all lookup local
32765: from all fwmark 0x3 lookup pilicka
32766: from all lookup main
32767: from all lookup default
# iptables -L -t mangle
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
MARK tcp -- anywhere anywhere tcp spt:ssh MARK
set 0x3
MARK tcp -- anywhere anywhere tcp dpt:ssh MARK
set 0x3
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
Routing for pilicka table is the same as for main table exept default gw on
all routers.
Network is set to work with DSL1 and it is working.
modem DSL1 modem DSL2
| |
| |
[eth0] R1 [eth1] [eth1] R4 [eth0]
\ /
LAN1 LAN2
\ /
[eth0] R2 [ra0] -------- [ra0] R3 [eth0]
[ra1]
|
|
Access point -- WLAN1
|
|
[ra0] R5 [eth0] -- LAN3
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
reply other threads:[~2005-10-30 11:25 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200510301225.21547.bartek@go3.pl \
--to=bartek@go3.pl \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.