From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?iso-8859-1?Q?Jos=E9_Gomes?= Subject: TWO ROUTING Date: Wed, 19 Nov 2003 13:17:06 -0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: Mime-Version: 1.0 Content-Type: multipart/related; boundary="----=_NextPart_000_0005_01C3AE9F.6FD32ED0" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0005_01C3AE9F.6FD32ED0 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0006_01C3AE9F.6FD32ED0" ------=_NextPart_001_0006_01C3AE9F.6FD32ED0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =20 Hello All, =20 I Need to setup one Linux box with 3 Nics and two valid ip address, my question is: =20 Nic1: 192.168.14.0/24 Nic2: 200.204.x.x/29 route to internet Nic3: 200.171.x.x/29 route to internet=20 =20 How can both Ips with different routes response to requests with both = routes enable ??? =20 Please help-me. =20 =20 =20 Best Regards, =20 =20 Jos=E9 Gomes Network Specialist Redbox Networks Ltda jgomes@redbox.com.br http://www.redbox.com.br + 5511 3816-3720 R. 212 =20 ------=_NextPart_001_0006_01C3AE9F.6FD32ED0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

=A0Hello = All,

I Need to setup one Linux box with 3 Nics and two = valid ip address, my question is:

Nic1: 192.168.14.0/24

Nic2: 200.204.x.x/29 route to = internet

Nic3: 200.171.x.x/29 route to internet =

How can both Ips with different routes response to = requests with both routes enable ???

Please help-me.

Best Regards,

Jos=E9 Gomes

Network Specialist

Redbox Networks Ltda

jgomes@redbox.com.br

http://www.redbox.com.br

+ 5511 3816-3720 R. 212

------=_NextPart_001_0006_01C3AE9F.6FD32ED0-- ------=_NextPart_000_0005_01C3AE9F.6FD32ED0 Content-Type: image/gif; name="image001.gif" Content-Transfer-Encoding: base64 Content-ID: R0lGODlhFAAUAPcAAP//////zP//mf//Zv//M///AP/M///MzP/Mmf/MZv/MM//MAP+Z//+ZzP+Z mf+ZZv+ZM/+ZAP9m//9mzP9mmf9mZv9mM/9mAP8z//8zzP8zmf8zZv8zM/8zAP8A//8AzP8Amf8A Zv8AM/8AAMz//8z/zMz/mcz/Zsz/M8z/AMzM/8zMzMzMmczMZszMM8zMAMyZ/8yZzMyZmcyZZsyZ M8yZAMxm/8xmzMxmmcxmZsxmM8xmAMwz/8wzzMwzmcwzZswzM8wzAMwA/8wAzMwAmcwAZswAM8wA AJn//5n/zJn/mZn/Zpn/M5n/AJnM/5nMzJnMmZnMZpnMM5nMAJmZ/5mZzJmZmZmZZpmZM5mZAJlm /5lmzJlmmZlmZplmM5lmAJkz/5kzzJkzmZkzZpkzM5kzAJkA/5kAzJkAmZkAZpkAM5kAAGb//2b/ zGb/mWb/Zmb/M2b/AGbM/2bMzGbMmWbMZmbMM2bMAGaZ/2aZzGaZmWaZZmaZM2aZAGZm/2ZmzGZm mWZmZmZmM2ZmAGYz/2YzzGYzmWYzZmYzM2YzAGYA/2YAzGYAmWYAZmYAM2YAADP//zP/zDP/mTP/ ZjP/MzP/ADPM/zPMzDPMmTPMZjPMMzPMADOZ/zOZzDOZmTOZZjOZMzOZADNm/zNmzDNmmTNmZjNm MzNmADMz/zMzzDMzmTMzZjMzMzMzADMA/zMAzDMAmTMAZjMAMzMAAAD//wD/zAD/mQD/ZgD/MwD/ AADM/wDMzADMmQDMZgDMMwDMAACZ/wCZzACZmQCZZgCZMwCZAABm/wBmzABmmQBmZgBmMwBmAAAz /wAzzAAzmQAzZgAzMwAzAAAA/wAAzAAAmQAAZgAAMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwAAAAAFAAUAEAIQwBJCBxI sKBBAAgTKlyYUCDDhwsdQpwoceLDihYjksh4cSNHjR9BhmzocSQAjCFRflTJkWVGlxZhUiw5UiZE gzhzBgQAOw== ------=_NextPart_000_0005_01C3AE9F.6FD32ED0-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jeffrey Laramie Subject: Re: TWO ROUTING Date: Thu, 20 Nov 2003 08:28:52 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3FBCC194.1080008@Loudoun-Fairfax.com> References: Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="iso-8859-1"; format="flowed" To: netfilter@lists.netfilter.org Jos=E9 Gomes wrote: > Hello All, > > =20 > > I Need to setup one Linux box with 3 Nics and two valid ip address, my=20 > question is: > > =20 > > Nic1: 192.168.14.0/24 > > Nic2: 200.204.x.x/29 route to internet > > Nic3: 200.171.x.x/29 route to internet > > =20 > > How can both Ips with different routes response to requests with both=20 > routes enable ??? > > =20 > > Please help-me. > > =20 > I'm not clear what it is you're asking. Setting routes doesn't involve=20 iptables or netfilter. If you could give some more information we can=20 try to help. Jeff From mboxrd@z Thu Jan 1 00:00:00 1970 From: Antony Stone Subject: Re: TWO ROUTING Date: Thu, 20 Nov 2003 13:40:19 +0000 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200311201340.hAKDeN722163@onyx.rockstone.co.uk> References: <3FBCC194.1080008@Loudoun-Fairfax.com> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <3FBCC194.1080008@Loudoun-Fairfax.com> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="iso-8859-1" To: netfilter@lists.netfilter.org On Thursday 20 November 2003 1:28 pm, Jeffrey Laramie wrote: > Jos=E9 Gomes wrote: > > > > I Need to setup one Linux box with 3 Nics and two valid ip address, m= y > > question is: > > > > Nic1: 192.168.14.0/24 > > > > Nic2: 200.204.x.x/29 route to internet > > > > Nic3: 200.171.x.x/29 route to internet > > > > How can both Ips with different routes response to requests with both > > routes enable ??? > > I'm not clear what it is you're asking. Setting routes doesn't involve > iptables or netfilter. If you could give some more information we can > try to help. I think he's simply asking whether Linux can use two default routes on on= e=20 machine at the same time. Agreed, not a netfilter question, but I see the same thing asked on the S= quid=20 mailing list too.... Antony. --=20 If you think you see a Heffalump in a trap, make sure it isn't really a Bear with an empty honey jar stuck on his hea= d. Please reply to the = list; please don't C= C me. From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jeffrey Laramie Subject: Re: TWO ROUTING Date: Thu, 20 Nov 2003 09:43:33 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3FBCD315.3020902@Loudoun-Fairfax.com> References: <3FBCC194.1080008@Loudoun-Fairfax.com> <200311201340.hAKDeN722163@onyx.rockstone.co.uk> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <200311201340.hAKDeN722163@onyx.rockstone.co.uk> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="iso-8859-1"; format="flowed" To: netfilter@lists.netfilter.org Antony Stone wrote: >On Thursday 20 November 2003 1:28 pm, Jeffrey Laramie wrote: > > =20 > >>Jos=E9 Gomes wrote: >> =20 >> >>>I Need to setup one Linux box with 3 Nics and two valid ip address, my >>>question is: >>> >>>Nic1: 192.168.14.0/24 >>> >>>Nic2: 200.204.x.x/29 route to internet >>> >>>Nic3: 200.171.x.x/29 route to internet >>> >>>How can both Ips with different routes response to requests with both >>>routes enable ??? >>> =20 >>> >>I'm not clear what it is you're asking. Setting routes doesn't involve >>iptables or netfilter. If you could give some more information we can >>try to help. >> =20 >> > >I think he's simply asking whether Linux can use two default routes on one= =20 >machine at the same time. > =20 > Oh, I see. I don't think that's possible at the routing level. That=20 sounds like a job for a load balancer but I'm not a technical guy and=20 routing isn't my strong suit. I'm really much better at filter rules,=20 logging, and sarcasm. ;-) >Agreed, not a netfilter question, but I see the same thing asked on the Sq= uid=20 >mailing list too.... > > =20 > I also see similar questions on multiple lists. I often have to check=20 the mail header to see what list they're posting to so I know the=20 context of the question. On a similar vein, does netfilter have any=20 mailing list usage guidelines posted anywhere? I looked around the other=20 day and couldn't find any. I've seen some sites with a link to=20 guidelines and etiquette on the list subscription page. Something like=20 that might be useful for this list. Jeff From mboxrd@z Thu Jan 1 00:00:00 1970 From: Antony Stone Subject: Re: TWO ROUTING Date: Thu, 20 Nov 2003 14:59:03 +0000 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200311201459.hAKEx5722511@onyx.rockstone.co.uk> References: <200311201340.hAKDeN722163@onyx.rockstone.co.uk> <3FBCD315.3020902@Loudoun-Fairfax.com> Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Return-path: In-Reply-To: <3FBCD315.3020902@Loudoun-Fairfax.com> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org On Thursday 20 November 2003 2:43 pm, Jeffrey Laramie wrote: > Antony Stone wrote: > > > >I think he's simply asking whether Linux can use two default routes on one > >machine at the same time. > > Oh, I see. I don't think that's possible at the routing level. That > sounds like a job for a load balancer but I'm not a technical guy and > routing isn't my strong suit. I'm really much better at filter rules, > logging, and sarcasm. ;-) All very admirable in a firewall :) As far as the twin-default-route question is concerned, I don't think the standard Linux kernel can do it either (I think it just uses the first routing table entry which matches, so one of the routes will never get used), however I'm sure I've seen a simple setup using a netmask of all zeroes, but ending in a 1, with two routes depending on whether that last bit is a one or a zero - this seems like a reasonable load-balancing system to use two routes equally, assuming that your traffic has reasonably distributed IP addresses. > > Agreed, not a netfilter question, but I see the same thing asked on the > > Squid mailing list too.... > > I also see similar questions on multiple lists. I often have to check > the mail header to see what list they're posting to so I know the > context of the question. On a similar vein, does netfilter have any > mailing list usage guidelines posted anywhere? I looked around the other > day and couldn't find any. I've seen some sites with a link to > guidelines and etiquette on the list subscription page. Something like > that might be useful for this list. I think that would be a good idea; I'm not aware of anything like this for the netfilter lists themselves, and I think a good starting point would be a copy of "Jeff's Rules" as posted on Monday, together with Aldo's recommendation to read Oskar's tutorial before posting (and preferably, before trying to configure netfilter). I think something like this would go well on http://www.netfilter.org/contact.html Antony. -- 90% of network problems are routing problems. 9 of the remaining 10% are routing problems in the other direction. The remaining 1% might be something else, but check the routing anyway. Please reply to the list; please don't CC me. From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Miguel Laborde" Subject: RE: TWO ROUTING Date: Thu, 20 Nov 2003 10:27:59 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: Content-Class: urn:content-classes:message Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org I believe you should be looking at iproute2 for this. -----Original Message----- From: netfilter-admin@lists.netfilter.org [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Antony Stone Sent: Thursday, November 20, 2003 9:59 AM To: netfilter@lists.netfilter.org Subject: Re: TWO ROUTING On Thursday 20 November 2003 2:43 pm, Jeffrey Laramie wrote: > Antony Stone wrote: > > > >I think he's simply asking whether Linux can use two default routes = on one > >machine at the same time. > > Oh, I see. I don't think that's possible at the routing level. That > sounds like a job for a load balancer but I'm not a technical guy and > routing isn't my strong suit. I'm really much better at filter rules, > logging, and sarcasm. ;-) All very admirable in a firewall :) As far as the twin-default-route question is concerned, I don't think = the=20 standard Linux kernel can do it either (I think it just uses the first=20 routing table entry which matches, so one of the routes will never get = used),=20 however I'm sure I've seen a simple setup using a netmask of all zeroes, = but=20 ending in a 1, with two routes depending on whether that last bit is a = one or=20 a zero - this seems like a reasonable load-balancing system to use two = routes=20 equally, assuming that your traffic has reasonably distributed IP = addresses. > > Agreed, not a netfilter question, but I see the same thing asked on = the > > Squid mailing list too.... > > I also see similar questions on multiple lists. I often have to check > the mail header to see what list they're posting to so I know the > context of the question. On a similar vein, does netfilter have any > mailing list usage guidelines posted anywhere? I looked around the = other > day and couldn't find any. I've seen some sites with a link to > guidelines and etiquette on the list subscription page. Something like > that might be useful for this list. I think that would be a good idea; I'm not aware of anything like this = for=20 the netfilter lists themselves, and I think a good starting point would = be a=20 copy of "Jeff's Rules" as posted on Monday, together with Aldo's=20 recommendation to read Oskar's tutorial before posting (and preferably,=20 before trying to configure netfilter). I think something like this = would go=20 well on http://www.netfilter.org/contact.html Antony. --=20 90% of network problems are routing problems. 9 of the remaining 10% are routing problems in the other direction. The remaining 1% might be something else, but check the routing anyway. Please reply to the = list; please don't = CC me. From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ramin Dousti Subject: Re: TWO ROUTING Date: Thu, 20 Nov 2003 11:42:18 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20031120164218.GA21892@cannon.eng.us.uu.net> References: <3FBCC194.1080008@Loudoun-Fairfax.com> <200311201340.hAKDeN722163@onyx.rockstone.co.uk> <3FBCD315.3020902@Loudoun-Fairfax.com> Mime-Version: 1.0 Return-path: Content-Disposition: inline In-Reply-To: <3FBCD315.3020902@Loudoun-Fairfax.com> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Jeffrey Laramie Cc: netfilter@lists.netfilter.org On Thu, Nov 20, 2003 at 09:43:33AM -0500, Jeffrey Laramie wrote: > >I think he's simply asking whether Linux can use two default routes on one > >machine at the same time. > > > > > > Oh, I see. I don't think that's possible at the routing level. Yes, it is. Take a look at "Linux Advanced Routing & Traffic Control". But one thing which is most of the time mistaken is that you can only affect the outbound packets with your local routing strategy. The inbound packets are at the mercy of your ISP(s). In order to make sure that your strategy is respected by your ISP(s) you need to somehow communicate that strategy with them, either call them up and make them commit to it or set up some kind of routing protocol with them. Both options are rearly accepted by your ISP(s) as a residential user ;-) Ramin From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jeffrey Laramie Subject: Re: TWO ROUTING Date: Thu, 20 Nov 2003 11:16:08 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3FBCE8C8.6070100@Loudoun-Fairfax.com> References: <3FBCC194.1080008@Loudoun-Fairfax.com> <200311201340.hAKDeN722163@onyx.rockstone.co.uk> <3FBCD315.3020902@Loudoun-Fairfax.com> <20031120164218.GA21892@cannon.eng.us.uu.net> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20031120164218.GA21892@cannon.eng.us.uu.net> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org Ramin Dousti wrote: >On Thu, Nov 20, 2003 at 09:43:33AM -0500, Jeffrey Laramie wrote: > > > >>>I think he's simply asking whether Linux can use two default routes on one >>>machine at the same time. >>> >>> >>> >>> >>Oh, I see. I don't think that's possible at the routing level. >> >> > >Yes, it is. Take a look at "Linux Advanced Routing & Traffic Control". > > Interesting. I take it you're referring to the "TEQL" device? Is this installed by a kernel module? From the iptables perspective (trying to stay at least marginally on topic!) if you used this would you use -i eth0 or -i teql0 to identify the interface? Jeff From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ramin Dousti Subject: Re: TWO ROUTING Date: Thu, 20 Nov 2003 13:25:53 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20031120182553.GC21892@cannon.eng.us.uu.net> References: <3FBCC194.1080008@Loudoun-Fairfax.com> <200311201340.hAKDeN722163@onyx.rockstone.co.uk> <3FBCD315.3020902@Loudoun-Fairfax.com> <20031120164218.GA21892@cannon.eng.us.uu.net> <3FBCE8C8.6070100@Loudoun-Fairfax.com> Mime-Version: 1.0 Return-path: Content-Disposition: inline In-Reply-To: <3FBCE8C8.6070100@Loudoun-Fairfax.com> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Jeffrey Laramie Cc: netfilter@lists.netfilter.org On Thu, Nov 20, 2003 at 11:16:08AM -0500, Jeffrey Laramie wrote: > Interesting. I take it you're referring to the "TEQL" device? Isn't TEQL for loadbalancing (bundling two or more interfaces terminating on the same remote device)? No, I was referring to the "ip ro ..." command which gives you tons of options, including multiple default routes, routing dicision based on other stuff than only the dst addr... > Is this > installed by a kernel module? From the iptables perspective (trying to > stay at least marginally on topic!) if you used this would you use -i > eth0 or -i teql0 to identify the interface? If you bundled eth0 and eth1 to have teql0 then the rules should reference teql0. Also, please note that the TEQL stuff is linux specific (interoperability issues). Ramin > Jeff From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Sylvain BERTRAND" Subject: Re: TWO ROUTING Date: Wed, 19 Nov 2003 16:24:08 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <006b01c3aeb1$2d31aae0$6500a8c0@SYFLO> References: Reply-To: "Sylvain BERTRAND" Mime-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0067_01C3AEB9.8ECFED40" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: =?iso-8859-1?Q?Jos=E9_Gomes?= , netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0067_01C3AEB9.8ECFED40 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0068_01C3AEB9.8ECFED40" ------=_NextPart_001_0068_01C3AEB9.8ECFED40 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, You have 2 ISP's and want to use both? If so, check out this page: = http://lartc.org/howto/lartc.rpdb.multiple-links.html Regards, Sylvain ----- Original Message -----=20 From: Jos=E9 Gomes=20 To: netfilter@lists.netfilter.org=20 Sent: Wednesday, November 19, 2003 4:17 PM Subject: TWO ROUTING =20 Hello All, =20 I Need to setup one Linux box with 3 Nics and two valid ip address, my = question is: =20 Nic1: 192.168.14.0/24 Nic2: 200.204.x.x/29 route to internet Nic3: 200.171.x.x/29 route to internet=20 =20 How can both Ips with different routes response to requests with both = routes enable ??? =20 Please help-me. =20 =20 =20 Best Regards, =20 =20 Jos=E9 Gomes Network Specialist Redbox Networks Ltda jgomes@redbox.com.br http://www.redbox.com.br + 5511 3816-3720 R. 212 =20 ------=_NextPart_001_0068_01C3AEB9.8ECFED40 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi,

You have 2 ISP's and want to = use=20 both?

If so, check out this page: http://lar= tc.org/howto/lartc.rpdb.multiple-links.html

Regards,

Sylvain

----- Original Message -----
From:=20 Jos=E9 Gomes=20
To: netfilter@lists.netfilter.o= rg=20

Sent: Wednesday, November 19, = 2003 4:17=20 PM

Subject: TWO ROUTING

=

Hello=20 All,

I Need=20 to setup one Linux box with 3 Nics and two valid ip address, my = question=20 is:

Nic1:=20 192.168.14.0/24

Nic2:=20 200.204.x.x/29 route to internet

Nic3:=20 200.171.x.x/29 route to internet

How can=20 both Ips with different routes response to requests with both routes = enable=20 ???

Please=20 help-me.

Best=20 Regards,

Jos=E9=20 Gomes

Network=20 Specialist

Redbox=20 Networks Ltda

jgomes@redbox.com.br

http://www.redbox.com.br

+ 5511=20 3816-3720 R. 212

------=_NextPart_001_0068_01C3AEB9.8ECFED40-- ------=_NextPart_000_0067_01C3AEB9.8ECFED40 Content-Type: image/gif; name="image001.gif" Content-Transfer-Encoding: base64 Content-ID: <006601c3aeb1$2d045950$6500a8c0@SYFLO> R0lGODlhFAAUAPcAAP//////zP//mf//Zv//M///AP/M///MzP/Mmf/MZv/MM//MAP+Z//+ZzP+Z mf+ZZv+ZM/+ZAP9m//9mzP9mmf9mZv9mM/9mAP8z//8zzP8zmf8zZv8zM/8zAP8A//8AzP8Amf8A Zv8AM/8AAMz//8z/zMz/mcz/Zsz/M8z/AMzM/8zMzMzMmczMZszMM8zMAMyZ/8yZzMyZmcyZZsyZ M8yZAMxm/8xmzMxmmcxmZsxmM8xmAMwz/8wzzMwzmcwzZswzM8wzAMwA/8wAzMwAmcwAZswAM8wA AJn//5n/zJn/mZn/Zpn/M5n/AJnM/5nMzJnMmZnMZpnMM5nMAJmZ/5mZzJmZmZmZZpmZM5mZAJlm /5lmzJlmmZlmZplmM5lmAJkz/5kzzJkzmZkzZpkzM5kzAJkA/5kAzJkAmZkAZpkAM5kAAGb//2b/ zGb/mWb/Zmb/M2b/AGbM/2bMzGbMmWbMZmbMM2bMAGaZ/2aZzGaZmWaZZmaZM2aZAGZm/2ZmzGZm mWZmZmZmM2ZmAGYz/2YzzGYzmWYzZmYzM2YzAGYA/2YAzGYAmWYAZmYAM2YAADP//zP/zDP/mTP/ ZjP/MzP/ADPM/zPMzDPMmTPMZjPMMzPMADOZ/zOZzDOZmTOZZjOZMzOZADNm/zNmzDNmmTNmZjNm MzNmADMz/zMzzDMzmTMzZjMzMzMzADMA/zMAzDMAmTMAZjMAMzMAAAD//wD/zAD/mQD/ZgD/MwD/ AADM/wDMzADMmQDMZgDMMwDMAACZ/wCZzACZmQCZZgCZMwCZAABm/wBmzABmmQBmZgBmMwBmAAAz /wAzzAAzmQAzZgAzMwAzAAAA/wAAzAAAmQAAZgAAMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwAAAAAFAAUAEAIQwBJCBxI sKBBAAgTKlyYUCDDhwsdQpwoceLDihYjksh4cSNHjR9BhmzocSQAjCFRflTJkWVGlxZhUiw5UiZE gzhzBgQAOw== ------=_NextPart_000_0067_01C3AEB9.8ECFED40-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: "George Vieira" Subject: RE: TWO ROUTING Date: Fri, 21 Nov 2003 08:44:32 +1100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <09B04A55822EFF4DA48D2E0BB2941D4A28AD45@wardrive.citadelcomputer.com.au> Mime-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="----_=_NextPart_001_01C3AFAF.7BCA50E0" Return-path: content-class: urn:content-classes:message Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: =?iso-8859-1?Q?Jos=E9_Gomes?= , netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C3AFAF.7BCA50E0 Content-Type: multipart/alternative; boundary="----_=_NextPart_002_01C3AFAF.7BCA50E0" ------_=_NextPart_002_01C3AFAF.7BCA50E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable He is asking what has been asked alot lately which is how to make a = machine respond to both internet links via it's appropriate IP = addresses. =20 So when a client accesses the machine via ww.xx.yy.zz, the firewall = responds back via that IP/ether, if a different client accesses it via = the aa.bb.cc.dd address, it responds back via that address/ether. =20 There was talk before about using CONNTRACK and marking packets on the = list before.. I think this is the solution but I didn't see a successful = response.. =20 Thanks, George Vieira. =20 -----Original Message----- From: Jos=E9 Gomes [mailto:jgomes@datas.com.br] Sent: Thursday, 20 November 2003 2:17 AM To: netfilter@lists.netfilter.org Subject: TWO ROUTING =20 Hello All, =20 I Need to setup one Linux box with 3 Nics and two valid ip address, my = question is: =20 Nic1: 192.168.14.0/24 Nic2: 200.204.x.x/29 route to internet Nic3: 200.171.x.x/29 route to internet=20 =20 How can both Ips with different routes response to requests with both = routes enable ??? =20 Please help-me. =20 =20 =20 Best Regards, =20 =20 Jos=E9 Gomes Network Specialist Redbox Networks Ltda jgomes@redbox.com.br http://www.redbox.com.br + 5511 3816-3720 R. 212 =20 ------_=_NextPart_002_01C3AFAF.7BCA50E0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

He is asking=20 what has been asked alot lately which is how to make a machine respond = to both=20 internet links via it's appropriate IP addresses.

So when a=20 client accesses the machine via ww.xx.yy.zz, the firewall responds back = via that=20 IP/ether, if a different client accesses it via the aa.bb.cc.dd address, = it=20 responds back via that address/ether.

There was=20 talk before about using CONNTRACK and marking packets on the list = before.. I=20 think this is the solution but I didn't see a successful=20 response..

Thanks,

George=20 Vieira.

-----Original Message-----
From: Jos=E9 Gomes=20 [mailto:jgomes@datas.com.br]
Sent: Thursday, 20 November = 2003 2:17=20 AM
To: netfilter@lists.netfilter.org
Subject: TWO=20 ROUTING

=20

Hello=20 All,

I Need=20 to setup one Linux box with 3 Nics and two valid ip address, my = question=20 is:

Nic1:=20 192.168.14.0/24

Nic2:=20 200.204.x.x/29 route to internet

Nic3:=20 200.171.x.x/29 route to internet

How can=20 both Ips with different routes response to requests with both routes = enable=20 ???

Please=20 help-me.

Best=20 Regards,

Jos=E9=20 Gomes

Network=20 Specialist

Redbox=20 Networks Ltda

jgomes@redbox.com.br

http://www.redbox.com.br

+ 5511=20 3816-3720 R. 212

------_=_NextPart_002_01C3AFAF.7BCA50E0-- ------_=_NextPart_001_01C3AFAF.7BCA50E0 Content-Type: image/gif; name="image001.gif" Content-Transfer-Encoding: base64 Content-ID: <498104221@20112003-0ca8> Content-Description: image001.gif Content-Location: image001.gif R0lGODlhFAAUAPcAAP//////zP//mf//Zv//M///AP/M///MzP/Mmf/MZv/MM//MAP+Z//+ZzP+Z mf+ZZv+ZM/+ZAP9m//9mzP9mmf9mZv9mM/9mAP8z//8zzP8zmf8zZv8zM/8zAP8A//8AzP8Amf8A Zv8AM/8AAMz//8z/zMz/mcz/Zsz/M8z/AMzM/8zMzMzMmczMZszMM8zMAMyZ/8yZzMyZmcyZZsyZ M8yZAMxm/8xmzMxmmcxmZsxmM8xmAMwz/8wzzMwzmcwzZswzM8wzAMwA/8wAzMwAmcwAZswAM8wA AJn//5n/zJn/mZn/Zpn/M5n/AJnM/5nMzJnMmZnMZpnMM5nMAJmZ/5mZzJmZmZmZZpmZM5mZAJlm /5lmzJlmmZlmZplmM5lmAJkz/5kzzJkzmZkzZpkzM5kzAJkA/5kAzJkAmZkAZpkAM5kAAGb//2b/ zGb/mWb/Zmb/M2b/AGbM/2bMzGbMmWbMZmbMM2bMAGaZ/2aZzGaZmWaZZmaZM2aZAGZm/2ZmzGZm mWZmZmZmM2ZmAGYz/2YzzGYzmWYzZmYzM2YzAGYA/2YAzGYAmWYAZmYAM2YAADP//zP/zDP/mTP/ ZjP/MzP/ADPM/zPMzDPMmTPMZjPMMzPMADOZ/zOZzDOZmTOZZjOZMzOZADNm/zNmzDNmmTNmZjNm MzNmADMz/zMzzDMzmTMzZjMzMzMzADMA/zMAzDMAmTMAZjMAMzMAAAD//wD/zAD/mQD/ZgD/MwD/ AADM/wDMzADMmQDMZgDMMwDMAACZ/wCZzACZmQCZZgCZMwCZAABm/wBmzABmmQBmZgBmMwBmAAAz /wAzzAAzmQAzZgAzMwAzAAAA/wAAzAAAmQAAZgAAMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwAAAAAFAAUAEAIQwBJCBxI sKBBAAgTKlyYUCDDhwsdQpwoceLDihYjksh4cSNHjR9BhmzocSQAjCFRflTJkWVGlxZhUiw5UiZE gzhzBgQAOw== ------_=_NextPart_001_01C3AFAF.7BCA50E0-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Antony Stone Subject: Re: TWO ROUTING Date: Thu, 20 Nov 2003 22:34:30 +0000 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200311202234.hAKMYY723743@onyx.rockstone.co.uk> References: <09B04A55822EFF4DA48D2E0BB2941D4A28AD45@wardrive.citadelcomputer.com.au> Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Return-path: In-Reply-To: <09B04A55822EFF4DA48D2E0BB2941D4A28AD45@wardrive.citadelcomputer.com.au> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org On Thursday 20 November 2003 9:44 pm, George Vieira wrote: > He is asking what has been asked alot lately which is how to make a machine > respond to both internet links via it's appropriate IP addresses. > > So when a client accesses the machine via ww.xx.yy.zz, the firewall > responds back via that IP/ether, if a different client accesses it via the > aa.bb.cc.dd address, it responds back via that address/ether. > > There was talk before about using CONNTRACK and marking packets on the list > before.. I think this is the solution but I didn't see a successful > response.. You can MARK packets on their way through netfilter, and do various interesting and possibly useful things to the packet on the basis of the mark which was assigned, however I do not think there is any way of identifying the packets which come in later as replies to these, and thereby doing anything based on the mark which was assigned to the first packet on its way through. Antony. -- This email was created using 100% recycled electrons. Please reply to the list; please don't CC me. From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marco Shaw Subject: Re: TWO ROUTING Date: Wed, 19 Nov 2003 19:58:39 -0400 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1069286319.8297.17.camel@rhelas3> References: <09B04A55822EFF4DA48D2E0BB2941D4A28AD45@wardrive.citadelcomputer.com.au> <200311202234.hAKMYY723743@onyx.rockstone.co.uk> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <200311202234.hAKMYY723743@onyx.rockstone.co.uk> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org > > There was talk before about using CONNTRACK and marking packets on the list > > before.. I think this is the solution but I didn't see a successful > > response.. > > You can MARK packets on their way through netfilter, and do various > interesting and possibly useful things to the packet on the basis of the mark > which was assigned, however I do not think there is any way of identifying > the packets which come in later as replies to these, and thereby doing > anything based on the mark which was assigned to the first packet on its way > through. Something I'm working on (or at least thinking really hard about) is a user-space Perl script that will (somehow) record sequence and acknowledgment numbers for outgoing packets, then possibly act on the returning packets depending on the ack and seq numbers found. Am I way off, or would this help/apply here? Marco