From: Grant Taylor <gtaylor@riverviewtech.net>
To: Ilo Lorusso <sneak@ipnoc.co.za>
Cc: netfilter@lists.netfilter.org
Subject: Re: Redirecting mail
Date: Sat, 09 Apr 2005 13:58:14 -0500 [thread overview]
Message-ID: <425825C6.5020504@riverviewtech.net> (raw)
In-Reply-To: <001001c53d1d$11e678f0$648045ac@sneak>
> Hi,
> I would just like to confirm with you, if machine 192.168.16.56 is to on
> the same switch but 3 hops away will the method you describe still work?
Based on your choice of word of "hop(s)" I'm going to assume that the 172,20,128.56 mail server that you want to route it's SMTP connections out a different INet connection is not directly connected to the same subnet that the 192.168.16.56 system is on. That being the case I'm going to assume that you do have a way to establish a route internally on your lan via the 192.168.16.x/24 network to an unknown network, to any more unknown networks, to the 192.168.16.x/24 network. If this is indeed the case I would make sure that all the routers that the traffic has to pass through to pass in to each network have a path to each of the other networks. An example below should help with this.
[Machine A]
INet connection with unknown IP
172.20.128.56 on the 172.20.128.x/24 network
[Machine B]
172.20.128.254 on the 172.20.128.x/24 network
10.0.0.1 on the 10.0.0.x/24 network
[Machine C]
10.0.0.254 on the 10.0.0.x/24 network
192.168.144.1 on the 192.168.144.x/24 network
[Machine D]
192.168.144.254 on the 192.168.144.x/24 network
192.168.16.1 on the 192.168.16.x/24 network
[Machine E]
192.168.16.56 on the 192.168.16.x/24 network
INet connection with an unknown IP
Following the above example I'm going to assume that you are wanting to route all SMTP traffic from Machine A out Machine E's internet connection. To do this I would make sure that machines / routers have at least the following in their (main) routing tables:
[Machine A's partial routing table]
INet connection is local to Machine A
172.20.128.x/24 network is local to Machine A
10.0.0.x/24 network via Machine B metric of 1
192.168.144.x/24 network via Machine B metric of 2
192.168.16.x/24 network via Machine B metric of 3
[Machine B's partial routing table]
172.20.128.x/24 network is local to Machine B
10.0.0.x/24 network is local to Machine B
192.168.144.x/24 network via Machine C metric of 1
192.168.16.x/24 network via Machine C metric of 2
[Machine C's partial routing table]
172.20.128.x/24 network via Machine B metric of 1
10.0.0.x/24 network is local to Machine C
192.168.144.x/24 network is local to Machine C
192.168.16.x/24 network via Machine D metric of 1
[Machine D's partial routing table]
172.20.128.x/24 network via Machine C metric of 2
10.0.0.x/24 network via Machine C metric of 1
192.168.144.x/24 is local to Machine D
192.168.16.x/24 is local to Machine D
[Machine E's partial routing table]
172.20.128.x/24 network via Machine D metric of 3
10.0.0.x/24 network via Machine D metrick of 2
192.168.144.x/24 network via Machine D metric of 1
192.168.16.x/24 is local to Machine E
INet connection is local to Machine E
This will allow your traffic to pass from machine A to Machine E with known routes. The only thing that might cause a problem is if you have firewalls on all systems DROPping or REJECTing traffic that is not from the local network trying to pass through it. But if you open up your firewalls to the traffic on each of the networks that need to pass through then there is no reason why traffic from Machine A could not pass out the INet connection on Machine E.
If you would like to give me some more details on what your network topology is I'd do my best to help you with what your routing tables would need to look like.
Grant. . . .
next prev parent reply other threads:[~2005-04-09 18:58 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-04-08 10:26 Redirecting mail Ilo Lorusso
2005-04-08 10:58 ` Rob Sterenborg
2005-04-08 11:38 ` Ilo Lorusso
2005-04-08 12:06 ` Rob Sterenborg
2005-04-08 18:57 ` Taylor, Grant
2005-04-08 11:43 ` Ilo Lorusso
2005-04-08 19:29 ` Taylor, Grant
2005-04-09 15:59 ` Ilo Lorusso
2005-04-09 18:58 ` Grant Taylor [this message]
2005-04-11 15:05 ` Ilo Lorusso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=425825C6.5020504@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=netfilter@lists.netfilter.org \
--cc=sneak@ipnoc.co.za \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.