Re: fwmarks

[Esteban <eribicic@sinectis.com>]

ive tryed and so on..

root@debian:~# find /proc/ -type f -iname "rp_filter"  -exec cat {} \;
0
0
0
0
0
root@debian:

it doesnt work!..
i see the accounting of paquets in iptables, so marking is working..

root@debian:~# ip route ls
172.0.0.0/24 dev eth0  proto kernel  scope link  src 172.0.0.82 
172.0.0.0/24 dev eth1  proto kernel  scope link  src 172.0.0.81 
default via 172.0.0.1 dev eth0 

but they keep on using the default route! (eth0) and not eth1!

root@debian:~# ip rule ls
0:      from all lookup local 
32761:  from all fwmark        2 lookup eth1 
32762:  from all fwmark        2 lookup eth1 
32763:  from all fwmark        d lookup eth1 
32764:  from all fwmark       13 lookup eth1 
32765:  from all to 198.133.219.25 lookup eth1 
32766:  from all lookup main 
32767:  from all lookup default 
root@debian:~# 
root@debian:~# ip route ls table eth1
172.0.0.1 dev eth1  scope link  src 172.0.0.81 
default via 172.0.0.1 dev eth1  src 172.0.0.81 
root@debian:~# 
root@debian:~#  iptables -t mangle -L -n -v
Chain PREROUTING (policy ACCEPT 11811 packets, 5080K bytes)
 pkts bytes target     prot opt in     out     source              
destination         
Chain INPUT (policy ACCEPT 10043 packets, 4859K bytes)
 pkts bytes target     prot opt in     out     source              
destination         
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source              
destination         
Chain OUTPUT (policy ACCEPT 8362 packets, 1812K bytes)
 pkts bytes target     prot opt in     out     source              
destination         
  120  6287 MARK       tcp  --  *      *       0.0.0.0/0           
0.0.0.0/0          tcp dpt:80 MARK set 0x2 
  261 12430 MARK       tcp  --  *      *       0.0.0.0/0           
0.0.0.0/0          tcp dpt:110 MARK set 0xd 
Chain POSTROUTING (policy ACCEPT 8542 packets, 1832K bytes)
 pkts bytes target     prot opt in     out     source              
destination         
root@debian:~# 


thanks for helping me!! any idea?? 

On Sat, 2003-03-01 at 20:13, Tomasz Wrona wrote:
> On 1 Mar 2003, Esteban wrote:
> 
> > and then
> > echo 201 www.out >> /etc/iproute2/rt_tables
> > ip rule add fwmark 2 table www.out
> > ip route add default gw via 1.1.1.1 dev ppp0
> > ip route flush cache
> >
> > and does not work!.
> > if i create a rule like
> > ip rule add to 2.2.2.2 table www.out
> > ip route flush cache
> >
> > that does work!..
> 
> Set [I guess location but key is to turn of rpfilter when using
> policyrouting via fwmark]:
> echo "0" > /proc/sys/net/ipv4/conf/ppp0/rp_filter
> 
> Regards
> tw
> -- 
> 
> ----------------
>  ck.eter.tym.pl
> 
> "Never let shooling disturb Your education"
> 
>