[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: CONFIG_IP_ROUTE_FWMARK not working in Debian !



supermega napisał(a):
of course:
# ip rule
0:      from all lookup local
32765:  from all fwmark 0x5 lookup isp2
32766:  from all lookup main
32767:  from all lookup default
Packets from <LAN_IP> are dropped.

If the ip rule looked like that:
0:      from all lookup local
32765:  from all fwmark 0x5 lookup isp2
32765:  from <LAN_IP> lookup isp2
32766:  from all lookup main
32767:  from all lookup default
then packets are routed according to table isp2.

Hmm... It's generaly not a very good idea to have two different rules with the same priority.

I've run that on many distos and I really don't think the problem is
with commands I write...

OTOH, I've run quite complicated setups with policy routing.
Have you tried logging the packets? IIRC, the LOG target should log the mark if there is any.



Reply to: