Re: policy routing problem
Hello,
Alexandr Shurigin a écrit :
ip route add 87.224.167.g1 dev eth1 table ETH1
ip route add default via 87.224.167.g1 dev eth1 table ETH1
ip route add 212.49.121.g2 dev eth3 table ETH3
ip route add default via 212.49.121.g2 dev eth3 table ETH3
iptables -t mangle -A OUTPUT -m owner --uid-owner 108 -j MARK --set-mark 1
ip rule add fwmark 1 pri 100 table ETH3
iptables -t nat -A POSTROUTING -o eth3 -j SNAT --to-source=212.49.121.g2
echo 0 > /proc/sys/net/ipv4/conf/eth3/rp_filter
ip rule add from 87.224.167.add1 pri 200 table ETH1
ip rule add from 212.49.121.addr2 pri 250 table ETH2
^^^^
Isn't it ETH3 ?
which resolves problem with 2 internet providers andd their routers.
all works fine.
But network 192.168.1.0/24 which is at interface eth2 cannot ping ip
addresses of eth1 and eth3 server interfaces.
The reply has the source address of eth1 resp. eth3 thus is routed
according to the ETH1 resp. ETH3 routing tables. Since these tables
contain no specific route to the destination 192.168.1.0/24, their
default route is used, which tells to send the packet through interface
eth1 resp. eth3 instead of eth2.
Try the following quick fix :
ip route add 192.168.1.0/24 dev eth2 table ETH1
ip route add 192.168.1.0/24 dev eth2 table ETH3
Reply to: