All of lore.kernel.org
 help / color / mirror / Atom feed
From: Fisher Alex <Alex.Fisher@uk.thalesgroup.com>
To: netfilter@lists.netfilter.org
Subject: Re: Is this possible?
Date: Thu, 22 Apr 2004 13:36:47 +0100	[thread overview]
Message-ID: <4087BC5F.5010806@uk.thalesgroup.com> (raw)

> However, if someone is adamant that you need to set up network
connectivity 
> between machines with such an unfriendly combination of IP addresses, I 
> suggest you simply set up multiple host-specific routes on the netflter 
> machine, telling it where to find each different 192.168.0.* destination 
> address, and don't have a standard 192.168.0.0/24 route on that system.

Unfortunately, this is exactly what I can't do :(  This is because there 
are two of each 192.168.0.* IP address.  The original destination IP 
address has to taken into account when determining whether packets route 
through eth1 or eth2.

I like the idea of MARKing the packets before they are routed.  DNATing 
them and then routing based on how they were previously MARKed.  As I 
get more comfortable with this (assuming nobody claims I'm trying to do 
the impossible), I'll try and put together some rules I might use to 
accomplish this.

Al
This email and any attachments are confidential to the intended recipient
and may also be privileged. If you are not the intended recipient please
delete it from your system and notify Thales Underwater Systems on +44 1963
370 551. You should not copy it or use it for any purpose nor disclose or
distribute its contents to any other person.


             reply	other threads:[~2004-04-22 12:36 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-04-22 12:36 Fisher Alex [this message]
2004-04-22 13:03 ` Is this possible? Antony Stone
     [not found] <65aa6af90505021204715af788@mail.gmail.com>
2005-05-02 19:17 ` Edmundo Carmona
2005-05-02 19:34   ` Guy
  -- strict thread matches above, loose matches on Subject: below --
2005-02-11 16:06 Michael Thompson
2005-02-13 12:18 ` Jose Maria Lopez Hernandez
2005-02-14 16:54 ` Andrew Schulman
2005-02-15  4:25   ` Alex Samad
2005-02-15  6:20     ` Michael Thompson
2004-04-27  9:57 T. Horsnell (tsh)
2004-04-26 10:03 Fisher Alex
2004-04-22 13:08 Fisher Alex
2004-04-22 11:30 Fisher Alex
2004-04-22 11:45 ` Kiran Kumar
2004-04-22 12:12 ` Antony Stone
2004-04-22 12:24   ` David Cannings
2004-04-22 12:44     ` Antony Stone
2004-04-23  8:49 ` T. Horsnell (tsh)
2004-04-10 20:27 is this possible ? Syed Faisal Gillani
2004-04-10 20:54 ` Frederic de Villamil
2004-04-10 20:14 Admin

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4087BC5F.5010806@uk.thalesgroup.com \
    --to=alex.fisher@uk.thalesgroup.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.