From: Fisher Alex <Alex.Fisher@uk.thalesgroup.com>
To: netfilter@lists.netfilter.org
Subject: Re: Is this possible?
Date: Thu, 22 Apr 2004 13:36:47 +0100 [thread overview]
Message-ID: <4087BC5F.5010806@uk.thalesgroup.com> (raw)
> However, if someone is adamant that you need to set up network
connectivity
> between machines with such an unfriendly combination of IP addresses, I
> suggest you simply set up multiple host-specific routes on the netflter
> machine, telling it where to find each different 192.168.0.* destination
> address, and don't have a standard 192.168.0.0/24 route on that system.
Unfortunately, this is exactly what I can't do :( This is because there
are two of each 192.168.0.* IP address. The original destination IP
address has to taken into account when determining whether packets route
through eth1 or eth2.
I like the idea of MARKing the packets before they are routed. DNATing
them and then routing based on how they were previously MARKed. As I
get more comfortable with this (assuming nobody claims I'm trying to do
the impossible), I'll try and put together some rules I might use to
accomplish this.
Al
This email and any attachments are confidential to the intended recipient
and may also be privileged. If you are not the intended recipient please
delete it from your system and notify Thales Underwater Systems on +44 1963
370 551. You should not copy it or use it for any purpose nor disclose or
distribute its contents to any other person.
next reply other threads:[~2004-04-22 12:36 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-04-22 12:36 Fisher Alex [this message]
2004-04-22 13:03 ` Is this possible? Antony Stone
[not found] <65aa6af90505021204715af788@mail.gmail.com>
2005-05-02 19:17 ` Edmundo Carmona
2005-05-02 19:34 ` Guy
-- strict thread matches above, loose matches on Subject: below --
2005-02-11 16:06 Michael Thompson
2005-02-13 12:18 ` Jose Maria Lopez Hernandez
2005-02-14 16:54 ` Andrew Schulman
2005-02-15 4:25 ` Alex Samad
2005-02-15 6:20 ` Michael Thompson
2004-04-27 9:57 T. Horsnell (tsh)
2004-04-26 10:03 Fisher Alex
2004-04-22 13:08 Fisher Alex
2004-04-22 11:30 Fisher Alex
2004-04-22 11:45 ` Kiran Kumar
2004-04-22 12:12 ` Antony Stone
2004-04-22 12:24 ` David Cannings
2004-04-22 12:44 ` Antony Stone
2004-04-23 8:49 ` T. Horsnell (tsh)
2004-04-10 20:27 is this possible ? Syed Faisal Gillani
2004-04-10 20:54 ` Frederic de Villamil
2004-04-10 20:14 Admin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4087BC5F.5010806@uk.thalesgroup.com \
--to=alex.fisher@uk.thalesgroup.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.