[Fwd: Re: [LARTC] Tunnel problem]

["David A. Bandel" <david@pananix.com>]

Ooops.  Forgot to check the addresses and send back to the list :-(


Guy Van Den Bergh wrote:
> 
> Have you tried to set a default route to the IP address of the tunnel
> interface at the main network:
> ip route add default via a.b.c.d
> where a.b.c.d is the IP address you gave to the tunnel interface at the
> main network end.

RTNETLINK answers: Network is unreachable

This is the same answer when I try to set the default route via the
tunnel name.

> 
> David A. Bandel wrote:
> 
> > Ladies and Gentlemen (and others ;-) ),
> 
> > back through the main network.  Reason: some connections realize that
> > traffic coming from my relocate network is coming via an invalid route
> > and is filtered.
> 
> this is also called RPF or reverse path filtering, and is sometimes used
> as a partial countermeasure against spoofed ddos attacks

yes, I know, I turn it on too on systems that aren't tunnel endpoints.

> 
> Regards,
> Guy

Ciao,

David A. Bandel
-- 
Focus on the dream, not the competition.
		-- Nemesis Racing Team motto

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/