Re: Multi-ISP configuration problem

Tom Eastep
Sat, 12 Apr 2008 20:35:40 -0000

Brad Clarke wrote:

> I think my problem is I don''t understand why they''re
being seen as
> martians simply because I added another public interface to my
> configuration, which probably just means I don''t really understand
> what defines a martian.

An incoming packet is considered to be a Martian if the response to that
packet would be routed out of a different interface from the one that the
incoming packet was received on.

So, for example, if the route to 192.168.1.0/24 is out of eth0 and a packet
from 192.168.1.4 is received on eth1, that packet is a Martian.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key