[lkml]   [2001]   [Sep]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
Subjectiptables/advanced routing

Content-Type: text/plain; charset=iso-8859-15
Content-Transfer-Encoding: 8bit

ip rule : many rules
ip route: several tables
doing nat, tunnels, source address based routing, QoS


1. ICMP packets do not pass advanced routing rules and tables, take default
route and associated outgoing source address from main table.
1. nat tunnel icmp fragmentation gets correct source address but bad
2. non-nat generated icmp gets also source address from main table.
3. itf main table does not have default, icmp source address decision
could go trough rules.

2. iptables does not accept SNAT in PREROUTING chain. Which makes ip rule
tables very long, much longer than it could be if source address would be
changed before routing.

Content-Type: application/octet-stream;name=""
Content-Disposition: attachment; filename=""
Content-Transfer-Encoding: base64



To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:02    [W:0.037 / U:0.012 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site