ROUTE target

ROUTE target

[Richard Bellamy]

Hi

Does anyone know if the ROUTE target works under 2.6?

Thanks

Richard

ROUTE target

[Timur Alperovich]

Hi,

I noticed there was a patch to add the ROUTE target and mangle the
interface used by the packets. I was looking through patch-o-matic-ng
and couldn't find it. I presume because it's not supported anymore.
What is a way to accomplish similar results with netfilter? For
instance, if someone could give me an example of how to force all ICMP
packets through eth0, that would be great.

Thank you,
Timur

RE: ROUTE target

[Rob Sterenborg]

> Hi,
> 
> I noticed there was a patch to add the ROUTE target and mangle the
> interface used by the packets. I was looking through patch-o-matic-
> ng and couldn't find it. I presume because it's not supported
> anymore.
> What is a way to accomplish similar results with netfilter? For
> instance, if someone could give me an example of how to force all
> ICMP packets through eth0, that would be great.

http://marc.info/?t=120048157400002&r=1&w=2


Grts,
Rob

Re: ROUTE target

[Timur Alperovich]

Thanks for the link! I got the ROUTE target working, but now I'm a bit
confused. I have 3 connections on a router. 2 to the ISP, ISP1 & ISP2,
and one for the LAN. I'd like all the LAN traffic bound for the
internet to be routed to ISP1 and all the traffic the router generates
locally to go through ISP2. I tried adding something like iptables -A
OUTPUT -j ROUTE --oif ISP2, which broke the LAN setup, as that traffic
was then forwarded through ISP2 too. I'm not sure why that happened.
The entry in the nat table for Masquerading is -t nat -o ISP1 -s
172.27.169.0/24 -j MASQUERADE. Anyone setup something similar?

Thank you,
Timur

>
> > Hi,
> >
> > I noticed there was a patch to add the ROUTE target and mangle the
> > interface used by the packets. I was looking through patch-o-matic-
> > ng and couldn't find it. I presume because it's not supported
> > anymore.
> > What is a way to accomplish similar results with netfilter? For
> > instance, if someone could give me an example of how to force all
> > ICMP packets through eth0, that would be great.
>
> http://marc.info/?t=120048157400002&r=1&w=2
>
>
> Grts,
> Rob
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>