linux-admin.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Martin Klier <martin.klier@atu.de>
To: Piotr Szczap <szczapu@poczta.onet.pl>
Cc: linux-admin@vger.kernel.org
Subject: Re: Clone a packet - iptables
Date: Tue, 11 Apr 2006 08:46:56 +0200	[thread overview]
Message-ID: <200604110846.56483.martin.klier@atu.de> (raw)
In-Reply-To: <443A6BB3.2010902@poczta.onet.pl>

[-- Attachment #1: Type: text/plain, Size: 900 bytes --]

Hi,

Am Montag 10 April 2006 16:29 schrieb Piotr Szczap:
> Hello,
> Is it possible to 'clone' a packet using iptables?
> I would like to do something like
> -A INPUT -p tcp --dport 1111 -j DNAT --to-destination host_a
> --to-destination host_b
> but without the round-robin load balancing, so that the packet coming to
> port 1111 is sent to host_a AND host_b.
>
> Or perhaps it can be done with BSD's packet filter?

I bet Linux' netfilter can't do this. Think about your tcp connection's 
partner: it will receive ACK flags from two processes on the destination 
machine. Your tcp connection won't survive for long.

Kind regards,
-- 
Mit freundlichen Grüßen

i.A. Martin Klier
Systemadministration / Datenbanken
-----------------------------------------------------------------
A.T.U Auto-Teile-Unger
Handels GmbH & Co. KG
Dr.-Kilian-Straße 4
D-92637 Weiden i. d. OPf.

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

  reply	other threads:[~2006-04-11  6:46 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-04-10 14:29 Clone a packet - iptables Piotr Szczap
2006-04-11  6:46 ` Martin Klier [this message]
2006-04-11  9:13   ` Piotr Szczap
2006-04-11 11:56     ` Tom Callahan
2006-04-19 13:45     ` Andy Davidson

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200604110846.56483.martin.klier@atu.de \
    --to=martin.klier@atu.de \
    --cc=linux-admin@vger.kernel.org \
    --cc=szczapu@poczta.onet.pl \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).