Messages in this thread | | | Subject | Re: 2.4.23 masquerading broken? key.oif = 0; | From | Neal Stephenson <> | Date | Tue, 09 Dec 2003 20:51:09 -0500 |
| |
Hi, I have this problem with 2.4.23. It is new problem, my setup was working fine on 2.4.22 and 2.4.22-ac4. I tried the patch of moving key.oif=0 without success. The problem occurs as soon as the machine comes up.
I use the iproute tools with rules and tables and mark packets with iptables so that port 80 traffic goes out through ppp0 rather than the default eth1. ppp0 has another iptable rule that masquerades everything. I see the packet enter through eth0 and it never reaches another interface, at least as far as I can tell with tcpdump. A brief description of my network is eth0 is my local network, ppp0 is my personal high speed, and eth1 is my permanent DSL connection.
I can send my .config or routing tablef if wanted. The brief is
CONFIG_IP_ADVANCED_ROUTER=y CONFIG_IP_MULTIPLE_TABLES=y CONFIG_IP_ROUTE_FWMARK=y CONFIG_IP_ROUTE_NAT=y
along with ip netfilter essentially all modules. Some relevant iptable and ip commands
iptables -t mangle -A PREROUTING --protocol tcp --destination-port 80 -j MARK --set-mark 0x932 iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
ip rule add pri 424 iif eth0 fwmark 0x932 table symp
and this is what shows up in dmesg
MASQUERADE: Route sent us somewhere else.
Any suggestions appreciated,
Neal
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |