Re: Fwmark and iproute2

[Mike Mestnik <cheako911@yahoo.com>]

--- Raffaele D'Elia <R.DElia@starcomitalia.com> wrote:

> Hi all,
> 
> I'm looking for help setting up a debian box with 2 default gateway.
> 
> I need to sent local generated packets through one or the other gateway 
> using fwmark rules.
> Unfortunately the outgoing interface is choosen before entering the 
> mangle table...
The CONNMARK and MARK targets, since thay don't mangle pkts, are valid in
ANY iptables chain.  Try adding your rules to the OUTPUT and FORWARD
chains within the filter table.

> 
> Any idea?
> Thanks
> Radel
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
> 
> 



		
__________________________________ 
Do you Yahoo!? 
Check out the new Yahoo! Front Page. 
www.yahoo.com