From mboxrd@z Thu Jan 1 00:00:00 1970 From: Guillaume Urbejtel Date: Mon, 22 Nov 2004 17:25:59 +0000 Subject: Re: [LARTC] Routing / ip rule / fwmark Message-Id: <41A22127.2020600@m6.fr> List-Id: References: <41A1C128.5060802@m6.fr> In-Reply-To: <41A1C128.5060802@m6.fr> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org Its OK now, The problem was the rp_filters... Guillaume Urbejtel wrote: > Hi All, > > I'm setting up a box with one default route and another handling only > web connection. > Here my conf : > > iptables -t mangle -A PREROUTING -p tcp --dport 80 -j MARK --set-mark 3 > > 0: from all lookup local > 32766: from all lookup main <- wich contain route to my lan and > internet inferfaces > 32767: from all fwmark 3 lookup webbox <- wich contain only > the default route for wen traffic > 32768: from all lookup default <- which contain only the other > default route > > The problem : Packets to port 80 go tough the webbox thanks to fwmark > but the reply from webbox don't cross the fw... > What's the reason ? > > Thanks ! > > Guillaume from france > > _______________________________________________ > LARTC mailing list / LARTC@mailman.ds9a.nl > http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/ > > _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/