mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
From: "Elmer Joandi" <elmer@linking.ee>
To: linux-kernel@vger.kernel.org
Subject: iptables/advanced routing
Date: Fri, 7 Sep 2001 21:14:00 +0200 (EET)	[thread overview]
Message-ID: <33357.10.110.1.3.999890040.squirrel@10.110.0.21> (raw)

[-- Attachment #1: Type: text/plain, Size: 683 bytes --]

2.4.2-ac3
ip rule :  many rules
ip route: several tables
doing nat, tunnels, source address based routing, QoS

Problems:

1. ICMP packets do not pass advanced routing rules and tables, take default 
route and associated outgoing source address from main table.
	1. nat tunnel icmp fragmentation gets correct source address but bad 
	route
	2. non-nat generated icmp gets also source address from main table.
	3. itf main table does not have default, icmp source address decision 
	could go trough rules.

2. iptables does not accept SNAT in PREROUTING  chain. Which makes ip rule 
tables very long, much longer than it could be if source address would be 
changed before routing.



[-- Attachment #2: Type: application/octet-stream, Size: 2 bytes --]



                 reply	other threads:[~2001-09-07 19:15 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=33357.10.110.1.3.999890040.squirrel@10.110.0.21 \
    --to=elmer@linking.ee \
    --cc=linux-kernel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

all inboxes | Powered by JetHome®