From: Marco Gaiarin <gaio@sv.lnf.it>
To: lartc@vger.kernel.org
Subject: Re: Again policy routing and OUTPUT...
Date: Fri, 12 Feb 2021 11:25:40 +0000 [thread overview]
Message-ID: <20210212112540.GH3116@sv.lnf.it> (raw)
In-Reply-To: <20210210091507.GD3677@sv.lnf.it>
Mandi! Grant Taylor
In chel di` si favelave...
> > I can use SNAT to change source IP but... there's some more 'elegant'
> > solution?
> You /might/ need to use SNAT / MASQUERADE.
[...]
> Typically, as in kernel default, the source IP is chosen based on the IP of
> the outgoing interface, which is chosen based on routing to the destination.
> If you are overriding this routing decision and forcing traffic out a
> different route, then there is a decent chance that the kernel will pick the
> wrong source IP. In situations like this, I expect that you will need to
> SNAT / MASQUERADE.
Perfectly clear. And you made me a bright idea. use 'MASQUERADE' instead
of SNAT to prevent some exotic script coding...
Thanks!
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/
Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797
Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
next prev parent reply other threads:[~2021-02-12 11:25 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-02-10 9:15 Again policy routing and OUTPUT Marco Gaiarin
2021-02-10 16:41 ` Grant Taylor
2021-02-12 11:25 ` Marco Gaiarin [this message]
2021-02-13 17:36 ` Grant Taylor
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20210212112540.GH3116@sv.lnf.it \
--to=gaio@sv.lnf.it \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.