lkml.org 
[lkml]   [2001]   [Sep]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
Subjectiptables/advanced routing
From

------=_?hOe4ym7uCUUmuF/Ihy2ac+g'JRBhu6Lcs6I93'8k6_1+.9Kt((9d7+PLMc6
Content-Type: text/plain; charset=iso-8859-15
Content-Transfer-Encoding: 8bit

2.4.2-ac3
ip rule : many rules
ip route: several tables
doing nat, tunnels, source address based routing, QoS

Problems:

1. ICMP packets do not pass advanced routing rules and tables, take default
route and associated outgoing source address from main table.
1. nat tunnel icmp fragmentation gets correct source address but bad
route
2. non-nat generated icmp gets also source address from main table.
3. itf main table does not have default, icmp source address decision
could go trough rules.

2. iptables does not accept SNAT in PREROUTING chain. Which makes ip rule
tables very long, much longer than it could be if source address would be
changed before routing.



------=_?hOe4ym7uCUUmuF/Ihy2ac+g'JRBhu6Lcs6I93'8k6_1+.9Kt((9d7+PLMc6
Content-Type: application/octet-stream;name=""
Content-Disposition: attachment; filename=""
Content-Transfer-Encoding: base64

DQo=

------=_?hOe4ym7uCUUmuF/Ihy2ac+g'JRBhu6Lcs6I93'8k6_1+.9Kt((9d7+PLMc6--

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:02    [W:0.042 / U:5.512 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site