From: Giles Coochey <giles@coochey.net>
To: Christoph Pleger <Christoph.Pleger@cs.tu-dortmund.de>
Cc: linux-admin@vger.kernel.org
Subject: Re: Policy routing problem
Date: Wed, 24 Oct 2012 15:27:17 +0100 [thread overview]
Message-ID: <5087FAC5.1010305@coochey.net> (raw)
In-Reply-To: <56295.129.217.4.64.1350990304.squirrel@postamt.cs.uni-dortmund.de>
[-- Attachment #1: Type: text/plain, Size: 1168 bytes --]
On 23/10/2012 12:05, Christoph Pleger wrote:
> Hello,
>
> I am running a DHCP-Server that serves multiple subnets. The server has
> an IP address in all of these subnets, and its primary IP address in a
> subnet that is not served by DHCP. Every IP address has its own VLAN
> Ethernet interface, eth0.102, eth0.104, etc. In this setup, the DHCP
> server often does not send its unicast replies on the interface where it
> received the corresponding request, but on the interface of its primary
> IP address, and with that IP. My first thought how to change this was by
> setting routes depending on destination addresses, but this would cause
> big problems with other services running on the same machine, so I tried
> to combine iproute2 and iptables, like this:
>
If there any particular reason why you have the DHCP server on the same
subnet as your DHCP clients?
I know I'm not answering your questions, but I wouldn't set it up that
way in the first place on my own environments.
--
Regards,
Giles Coochey, CCNA, CCNAS
NetSecSpec Ltd
+44 (0) 7983 877438
http://www.coochey.net
http://www.netsecspec.co.uk
giles@coochey.net
[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/pkcs7-signature, Size: 4968 bytes --]
next prev parent reply other threads:[~2012-10-24 14:27 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-10-23 11:05 Policy routing problem Christoph Pleger
2012-10-23 11:27 ` Oleg
2012-10-23 13:23 ` Christoph Pleger
2012-10-23 14:47 ` Oleg
2012-10-23 12:16 ` Jimmy Thrasibule
2012-10-23 14:14 ` Christoph Pleger
2012-10-24 14:27 ` Giles Coochey [this message]
-- strict thread matches above, loose matches on Subject: below --
2012-10-23 15:14 Christoph Pleger
2012-10-24 13:40 ` Oleg
2012-10-25 9:23 Christoph Pleger
2012-10-25 9:25 Christoph Pleger
2012-10-25 10:38 ` Giles Coochey
2012-10-25 12:57 Christoph Pleger
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5087FAC5.1010305@coochey.net \
--to=giles@coochey.net \
--cc=Christoph.Pleger@cs.tu-dortmund.de \
--cc=linux-admin@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).