[Fwd: Re: [LARTC] Tunnel problem]

[Fwd: Re: [LARTC] Tunnel problem]

[David A. Bandel]

Ooops.  Forgot to check the addresses and send back to the list :-(


Guy Van Den Bergh wrote:
> 
> Have you tried to set a default route to the IP address of the tunnel
> interface at the main network:
> ip route add default via a.b.c.d
> where a.b.c.d is the IP address you gave to the tunnel interface at the
> main network end.

RTNETLINK answers: Network is unreachable

This is the same answer when I try to set the default route via the
tunnel name.

> 
> David A. Bandel wrote:
> 
> > Ladies and Gentlemen (and others ;-) ),
> 
> > back through the main network.  Reason: some connections realize that
> > traffic coming from my relocate network is coming via an invalid route
> > and is filtered.
> 
> this is also called RPF or reverse path filtering, and is sometimes used
> as a partial countermeasure against spoofed ddos attacks

yes, I know, I turn it on too on systems that aren't tunnel endpoints.

> 
> Regards,
> Guy

Ciao,

David A. Bandel
-- 
Focus on the dream, not the competition.
		-- Nemesis Racing Team motto

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [Fwd: Re: [LARTC] Tunnel problem]

[bert hubert]

On Sun, Mar 18, 2001 at 07:11:58AM -0500, David A. Bandel wrote:
> Ooops.  Forgot to check the addresses and send back to the list :-(
> 
> 
> Guy Van Den Bergh wrote:
> > 
> > Have you tried to set a default route to the IP address of the tunnel
> > interface at the main network:
> > ip route add default via a.b.c.d
> > where a.b.c.d is the IP address you gave to the tunnel interface at the
> > main network end.
> 
> RTNETLINK answers: Network is unreachable
> 
> This is the same answer when I try to set the default route via the
> tunnel name.

Has this problem been solved yet?

Regards,

bert

-- 
http://www.PowerDNS.com      Versatile DNS Services  
Trilab                       The Technology People   
'SYN! .. SYN|ACK! .. ACK!' - the mating call of the internet

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/

Re: [Fwd: Re: [LARTC] Tunnel problem]

[David A. Bandel]

bert hubert wrote:
> 
> On Sun, Mar 18, 2001 at 07:11:58AM -0500, David A. Bandel wrote:
> > Ooops.  Forgot to check the addresses and send back to the list :-(
> >
> >
> > Guy Van Den Bergh wrote:
> > >
> > > Have you tried to set a default route to the IP address of the tunnel
> > > interface at the main network:
> > > ip route add default via a.b.c.d
> > > where a.b.c.d is the IP address you gave to the tunnel interface at the
> > > main network end.
> >
> > RTNETLINK answers: Network is unreachable
> >
> > This is the same answer when I try to set the default route via the
> > tunnel name.
> 
> Has this problem been solved yet?

Unfortunately, no.  Fortunately, only a very few sites are affected by
the disparate route problem (and the RFCs provide that packets may not
return by the same route).  I'm just waiting for a frame relay line and
I'll close the tunnel, but I was hoping for a solution to this in the
meantime.

Ciao,

David A. Bandel
-- 
Focus on the dream, not the competition.
		-- Nemesis Racing Team motto

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://ds9a.nl/2.4Routing/