All of lore.kernel.org
 help / color / mirror / Atom feed
From: Vinod Chandran <vinod_chandran@multitech.co.in>
To: netfilter@lists.netfilter.org
Subject: Problems with Routing and masquerading
Date: Tue, 30 May 2006 20:04:16 +0530	[thread overview]
Message-ID: <447C57E8.3050005@multitech.co.in> (raw)

Hi,

I have a linux box which balances load between two interfaces ( say WAN1 
and WAN2). I have masquerading on for any request coming from LAN to the 
outside world.

The setup is in such a way that WAN1 drops packets with source ip 
belonging to WAN2's network and viceversa.
For some strange reason, I find that packet coming out from the WAN 
interface has source address of WAN2 and thereby getting dropped.

When I check the route cache , I find that for the same source and 
destination, I have two route cache entries

192.168.52.66   192.168.26.73   192.168.19.76         0      0        0 
eth1
192.168.52.66   192.168.26.73   192.168.20.25   i     0      0       23 
eth2

Here 192.168.19.76 is the WAN1 gateway and 192.168.20.25 is WAN2 
gateway, as we see the packets are going out through WAN2 , but the 
masquerading has happened to the WAN1 IP address.

It seems to me that the root of the problem is the creation of the two 
cache entries. Any idea why this happens, and how it can be avoided.

Thanks and Regards,
Vinod C



             reply	other threads:[~2006-05-30 14:34 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-05-30 14:34 Vinod Chandran [this message]
2006-05-31  7:01 ` Problems with Routing and masquerading Pascal Hambourg

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=447C57E8.3050005@multitech.co.in \
    --to=vinod_chandran@multitech.co.in \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.