From: Ramin Alidousti <ramin@cannon.eng.us.uu.net>
To: lartc@vger.kernel.org
Subject: Re: [LARTC] Problem routing packets using fwmark and netfilter
Date: Mon, 07 Oct 2002 17:11:57 +0000 [thread overview]
Message-ID: <marc-lartc-103401182521857@msgid-missing> (raw)
In-Reply-To: <marc-lartc-103400817319577@msgid-missing>
On Mon, Oct 07, 2002 at 12:28:46PM -0400, Stephane Ouellette wrote:
> MY PROBLEM
> ----------
>
> Suppose I want to do some policy routing using the fwmark as a routing
> key. I should have entered the following commands:
>
> iptables -t mangle -A OUTPUT -o eth0 -p icmp --icmp-type \
> -d $TESTMACHINE1 -j MARK --set-mark 1
> iptables -t mangle -A OUTPUT -o eth1 -p icmp --icmp-type \
> -d $TESTMACHINE2 -j MARK --set-mark 2
I'd remove the '-o' option as you don't know yet where the packets
would be routed to.
Ramin
PS. You forgot the --icmp-type argument. Did your linux box take
these commands?
> ip rule add fwmark 1 table lan1
> ip rule add fwmark 2 table lan2
>
> Now, pinging $TESTMACHINE1 or $TESTMACHINE2 always uses the same
> gateway! The iptables rule counters increment as expected but it seems
> that the fwmark has no effect on routing !!!
>
>
> MY CONFIGURATION
> ----------------
>
> RedHat 7.2 on i686
> Kernel 2.4.20-pre9 (all options related to advanced routing are enabled)
> Today's CVS snapshot of the Netfilter project
>
>
>
> Any suggestion would be greatly appreciated !!!
>
> Stephane.
>
>
> _______________________________________________
> LARTC mailing list / LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
next prev parent reply other threads:[~2002-10-07 17:11 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-10-07 16:28 [LARTC] Problem routing packets using fwmark and netfilter Stephane Ouellette
2002-10-07 17:11 ` Ramin Alidousti [this message]
2002-10-07 22:21 ` Stephane Ouellette
2002-10-07 23:51 ` Ramin Alidousti
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=marc-lartc-103401182521857@msgid-missing \
--to=ramin@cannon.eng.us.uu.net \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.