[LARTC] Routing / ip rule / fwmark

[LARTC] Routing / ip rule / fwmark

[Guillaume Urbejtel]

Hi All,

I'm setting up a box with one default route and another handling only  
web  connection.
Here my conf  :

iptables -t mangle -A PREROUTING -p tcp --dport 80 -j MARK --set-mark 3

0:      from all lookup local
32766:  from all lookup main <- wich contain route to my lan and 
internet inferfaces
32767:  from all fwmark        3 lookup webbox  <- wich contain only the 
default route for wen traffic
32768:  from all lookup default <- which contain only the other default 
route

The problem : Packets to port 80 go tough the webbox thanks to fwmark 
but the reply from webbox don't cross the fw...
What's the reason ?

Thanks !

Guillaume from france
 
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] Routing / ip rule / fwmark

[Guillaume Urbejtel]

Its OK now,

The problem was the rp_filters...

Guillaume Urbejtel wrote:

> Hi All,
>
> I'm setting up a box with one default route and another handling only  
> web  connection.
> Here my conf  :
>
> iptables -t mangle -A PREROUTING -p tcp --dport 80 -j MARK --set-mark 3
>
> 0:      from all lookup local
> 32766:  from all lookup main <- wich contain route to my lan and 
> internet inferfaces
> 32767:  from all fwmark        3 lookup webbox  <- wich contain only 
> the default route for wen traffic
> 32768:  from all lookup default <- which contain only the other 
> default route
>
> The problem : Packets to port 80 go tough the webbox thanks to fwmark 
> but the reply from webbox don't cross the fw...
> What's the reason ?
>
> Thanks !
>
> Guillaume from france
>
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
>
>

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/