From: Marco Gaiarin <gaio@sv.lnf.it>
To: lartc@vger.kernel.org
Subject: Re: Again policy routing and OUTPUT...
Date: Fri, 12 Feb 2021 11:25:40 +0000 [thread overview]
Message-ID: <20210212112540.GH3116@sv.lnf.it> (raw)
In-Reply-To: <20210210091507.GD3677@sv.lnf.it>
Mandi! Grant Taylor
In chel di` si favelave...
> > I can use SNAT to change source IP but... there's some more 'elegant'
> > solution?
> You /might/ need to use SNAT / MASQUERADE.
[...]
> Typically, as in kernel default, the source IP is chosen based on the IP of
> the outgoing interface, which is chosen based on routing to the destination.
> If you are overriding this routing decision and forcing traffic out a
> different route, then there is a decent chance that the kernel will pick the
> wrong source IP. In situations like this, I expect that you will need to
> SNAT / MASQUERADE.
Perfectly clear. And you made me a bright idea. use 'MASQUERADE' instead
of SNAT to prevent some exotic script coding...
Thanks!
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/
Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797
Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
next prev parent reply other threads:[~2021-02-12 11:25 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-02-10 9:15 Again policy routing and OUTPUT Marco Gaiarin
2021-02-10 16:41 ` Grant Taylor
2021-02-12 11:25 ` Marco Gaiarin [this message]
2021-02-13 17:36 ` Grant Taylor
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20210212112540.GH3116@sv.lnf.it \
--to=gaio@sv.lnf.it \
--cc=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox