Re: [LARTC] ip rule and transparent proxy.

[Esteban Ribicic <eribicic@UolSinectis.com>]

you should try marking squid packets (output chain for example) and then
add a rule (ip rule ls)..
in lartc.org http://www.lartc.org/lartc.pdf have plenty of examples.

tips: when marking packets on iptables, use hexa not decimal notting.
try patching the kernel if does not work (http://www.ssi.bg/~ja/) cause
kernel default source may not work...

and its probably that squid use as source adrres of ip header the ip on
the default route, so you might have to nat that src to the other
interface (so packets leave the interface you want and come back in that
interface and not the other -if they come..- )

greets and good speed.

On Wed, 2003-03-05 at 10:27, Alessandro Ren wrote:
> 
> 	Hello,
> 
> 	I have a linux box with 2 internet links where I am dividing the
> traffic among both links. I have one link for VPN and the other one for
> internet access in general.
> 	The main routing table has its default gateway and it's used for VPN
> access and the other routing table is used to deviate all the other traffic.
> If a set transparent proxy, all tha traffic goes out through the main
> routing table, but I'd like it do go out in the second default gateway.
> 	I've tried to mark packets but it did't work for transparent proxy.
> Any sugestions here?
> 	I have in the second routing table routes for the VPNs LAN pointing
> to the defalut route of the main routing table and rest gets out in the
> second link.
> 
> 	Thanks a lot.


_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/