Messages in this thread |  | | Date | Fri, 7 Sep 2001 21:14:00 +0200 (EET) | Subject | iptables/advanced routing | From | "Elmer Joandi" <> |
| |
------=_?hOe4ym7uCUUmuF/Ihy2ac+g'JRBhu6Lcs6I93'8k6_1+.9Kt((9d7+PLMc6 Content-Type: text/plain; charset=iso-8859-15 Content-Transfer-Encoding: 8bit
2.4.2-ac3 ip rule : many rules ip route: several tables doing nat, tunnels, source address based routing, QoS
Problems:
1. ICMP packets do not pass advanced routing rules and tables, take default route and associated outgoing source address from main table. 1. nat tunnel icmp fragmentation gets correct source address but bad route 2. non-nat generated icmp gets also source address from main table. 3. itf main table does not have default, icmp source address decision could go trough rules.
2. iptables does not accept SNAT in PREROUTING chain. Which makes ip rule tables very long, much longer than it could be if source address would be changed before routing.
------=_?hOe4ym7uCUUmuF/Ihy2ac+g'JRBhu6Lcs6I93'8k6_1+.9Kt((9d7+PLMc6 Content-Type: application/octet-stream;name="" Content-Disposition: attachment; filename="" Content-Transfer-Encoding: base64
DQo=
------=_?hOe4ym7uCUUmuF/Ihy2ac+g'JRBhu6Lcs6I93'8k6_1+.9Kt((9d7+PLMc6--
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |