Re: [LARTC] Fwmark problem - policy routing does not work.

[Julian Anastasov <ja@ssi.bg>]

	Hello,

On Sat, 27 Apr 2002, Thilo Schulz wrote:

> > It does not. The ip rule does that. Routing does not mangle packets, unless
> > the packet is locally generated and incomplete.
>
> it is generated locally in my case.

	May be your problem is that LOCALOUT is after routing,
the socket already created connected route and is bound to
specific src IP. It is too late to mark packets just to select
different src IP via routing. May be you have to use SNAT to change
the src IP to the desired one. I didn't tried it and I don't know
whether it works. And I see in recent sources some funny things,
for example, ipt_local_hook(MANGLE) calls ip_route_me_harder from
LOCAL_IN but I'm not sure it will hurt your tests. May be you can
ask for new LOCAL_ROUTING hook where MANGLE can select different src
IP for different users before route connection :)))

> - Thilo Schulz

Regards

--
Julian Anastasov <ja@ssi.bg>

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/