Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Brent Clark <bclark@eccotours.dyndns.org>
To: /dev/rob0 <rob0@gmx.co.uk>
Cc: netfilter@lists.netfilter.org
Subject: Re: port 80 out new ISP
Date: Fri, 19 Aug 2005 19:22:56 +0200	[thread overview]
Message-ID: <43061570.9090702@eccotours.dyndns.org> (raw)
In-Reply-To: <200508191205.22196.rob0@gmx.co.uk>

Hi Rob

A big thanks for replying to my email.

>>ip route flush table TELKOM  >>/dev/null
>>ip route show table main |grep -Ev ^default\
> 
> 
> What does this command, without the "\<newline>" and pipe, return?
> 

gate:~# ip route show table main | grep -Ev ^default
196.36.10.112/29 dev eth0  proto kernel  scope link  src 196.36.10.114
192.168.111.0/24 dev eth1  proto kernel  scope link  src 192.168.111.10
192.168.10.0/24 dev eth2  proto kernel  scope link  src 192.168.10.100
gate:~#

>>ip rule add fwmark 1 table TELKOM >> /dev/null
> 
> 
> And what do your routing rules show at this point?

gate:~# ip rule show
0:      from all lookup local
32765:  from all fwmark 0x1 lookup TELKOM
32766:  from all lookup main
32767:  from all lookup default
gate:~#

gate:~# ip route show table main
196.36.10.112/29 dev eth0  proto kernel  scope link  src 196.36.10.114
192.168.111.0/24 dev eth1  proto kernel  scope link  src 192.168.111.10
192.168.10.0/24 dev eth2  proto kernel  scope link  src 192.168.10.100
default via 196.36.10.113 dev eth0
gate:~#

gate:~# ip route show table TELKOM
196.36.10.112/29 dev eth0  proto kernel  scope link  src 196.36.10.114
192.168.111.0/24 dev eth1  proto kernel  scope link  src 192.168.111.10
192.168.10.0/24 dev eth2  proto kernel  scope link  src 192.168.10.100
default via 192.168.10.200 dev eth2
gate:~#


>># SNAT the Private LAN
>>$IPT -t nat -A POSTROUTING -o eth0 -s 192.168.111.0/24 -j SNAT
>>--to-source 196.36.10.114
>>#$IPT -t nat -A POSTROUTING -o eth2 -s 
>>192.168.111.0/24 -j SNAT --to-source 192.168.10.200
> 
> 
> Why is that one commented?

Im commented it out, hoping the MASQUERADE would work.
> 
> 
>>$IPT -t nat -A POSTROUTING -o eth2 -s 192.168.111.0/24 -j MASQUERADE
> 
> 
> MASQUERADE will not work with dual routing.

Thanks



  reply	other threads:[~2005-08-19 17:22 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-08-19 15:55 port 80 out new ISP Brent Clark
2005-08-19 17:05 ` /dev/rob0
2005-08-19 17:22   ` Brent Clark [this message]
2005-08-19 18:05   ` Brent Clark
2005-08-20  0:00     ` Robert Nichols
2005-08-20  9:51       ` Brent Clark
2005-08-21  9:19   ` Jan Engelhardt

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=43061570.9090702@eccotours.dyndns.org \
    --to=bclark@eccotours.dyndns.org \
    --cc=netfilter@lists.netfilter.org \
    --cc=rob0@gmx.co.uk \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox