All of lore.kernel.org
 help / color / mirror / Atom feed
From: Michele <michele@protocol.it>
To: lartc@vger.kernel.org
Subject: [LARTC] 2 router on one server web
Date: Thu, 22 May 2003 14:33:05 +0000	[thread overview]
Message-ID: <marc-lartc-105361408702941@msgid-missing> (raw)

Hi,
I read your "Linux 2.4 Advanced Routing" HOWTO, and particularly the
chapter 11 "Netfilter & iproute - marking packets".

I have two connections adsl in a server web

adsl1
      |
      |
      |
|194.243.12.15 (eth0)   SERVER WEB (eth1) 194.184.12.85 |
                                            |
                                            |
                                            |
                                           adsl2
                                           194.184.12.81

my default gateway is 194.243.12.1 and this is the reason why I can't
ping the adress  194.184.12.85 from another PC outside the LAN.


I configurated iproute e iptables in the follow way:

iptables:
#for f in /proc/sys/net/ipv4/conf/*/rp_filter; do echo 0 > $f; done
#echo 1 > /proc/sys/net/ipv4/route/flush
#iptables -A PREROUTING -i eth1 -p -t mangle -j MARK --set-mark 1

and iproute:
#echo 201 ruteradsl2 >>/etc/iproute2/rt_tables
#ip rule add fwmark 1 table  routeradsl2
# ip rule ls
0:      from all lookup local
32765:  from all fwmark        1 lookup routeradsl2
32766:  from all lookup main
32767:  from all lookup default
# /sbin/ip route add default via 194.184.12.81 dev eth1 table routeradsl2

Unfortunately it doesn't work.
I made this test:
I put after the line "iptables -A PREROUTING -i eth1  -t mangle -j
MARK --set-mark 1" the line
iptables -t nat -A PREROUTING -j LOG \
        --log-level NOTICE --log-prefix "PRE DEBUG after MARK: "

then from an outside pc, I ping the address 194.184.12.81 (adsl2) with
success, then I ping  the address 194.184.12.85 whitout success.

In the log of iptables there are many line like these:
May 21 15:09:22 ottavio kernel: PRE DEBUG after MARK: IN=eth1 OUTMAC\0:c0:49:b4:7f:c3:00:08:27:10:a9:a9:08:00 SRC€.207.4.98
DST\x194.184.12.85 LEN„ TOS=0x00 PREC=0x00 TTLR ID=0 DF PROTO=ICMP
TYPE=8 CODE=0 ID\x17453 SEQ\x1280

Where do I wrong?

thanks

Michele Cerioni







_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

             reply	other threads:[~2003-05-22 14:33 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-05-22 14:33 Michele [this message]
2003-05-22 15:25 ` [LARTC] 2 router on one server web Martin A. Brown
2003-05-27 12:39 ` Michele
2003-05-27 13:28 ` Martin A. Brown

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=marc-lartc-105361408702941@msgid-missing \
    --to=michele@protocol.it \
    --cc=lartc@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.