similar to: default route with two nexthops and MASQUERADE problem

I have a 2.6.12(ubuntu-patchset), kernel recompiled with this routing options: [*] IP: advanced router [*] IP: policy routing [*] IP: equal cost multipath Load balancing is working great, but i have problems whits long term tcp flows (like msn-messenger or vpns or any other type of long term ip based conection). I assume this is because after a period of time, the per-host

Hi, my box is connected to 3 networks, eth0 eth1 wlan0. I want "my" traffic to go via wlan0 and everything from eth1 NATed to eth0: eth0 192.168.1.10/24 eth1 172.16.1.1/12 wlan0 192.168.10.190/24 I first tried this with two single hosts: iptables -A POSTROUTING -j MASQUERADE -o eth0 -t nat iptables -A POSTROUTING -j MASQUERADE -o wlan0 -t nat echo 200 Forw >>

Hi! I have many problems getting this thing to work. There''s a host with two network interfaces, where there are two routers to Internet in two separated networks. The host uses multihop routing for deciding to which router send the packets... but the routing decision is wrong made. Some packets with source address of one NIC, go to other network. I have a host with three NICs in it:

I''ve applied julian''s paches to a 2.6.14 gentoo kernel with the appropiate options enabled, and i''m using a modified version of the mpath2.sh script also available on julian''s site http://www.ssi.bg/~ja/ Overall everything works nearly perfectly. Incomming connections to either the fios (PPPoE) connection, or cable modem get routed back out correctly. The

hi i have a strange night with our firewall ;) i wanted to utilize the icmp redirect packages to connect our to different networks on the same segment i have a lot of these messages in dmesg: Redirect from 10.0.0.2 on lo about 152.66.235.1 ignored. Advised path = 0.0.0.0 -> 0.0.0.0, tos 00 --- with tcpdump i saw strange packets crawling on the lo interface ;) IP 10.0.0.2 > 0.0.0.0: icmp

hi all, i am setting up a load balancing network with failover, i have applied julian patch, but whenever i try to establish a new connection from any client node, it gives me two entries in the routing cache for that destination with different or same interface for those entries, but off the two entries only one route path is used for the transmission. the ip rule/route are as follows,

Hello, I need some help about a routing problem on a complex configuration. The problem is that I can''t reach from services outside from my DMZ. The scenario is a gateway linked to three internet connections, so that I used three distinct iproute2 tables for routing. The gw is running ipvs for balancing over the dmz''s servers. DMZ servers are on 192.168.1.0/24 network, .

Hi all, I''m trying to set up a computer with 2 routes to the internet, much as described at http://lartc.org/howto/lartc.rpdb.multiple-links.html .One of my interfaces (eth5, 192.168.2.2) is only used for traffic originating inside the network. The other (eth1, 192.168.1.2) is only used for a VPN, where all (udp) traffic originates from outside our network. I have created a second

Hi, I think I found a problem in iproute or ubuntu kernel. I think that the "ip route get" returns wrong interface and gateway in an multipath routing environment on Ubuntu 6.06 LTS. I reported it also to launchpad as a bug: https://bugs.launchpad.net/ubuntu/+source/iproute/+bug/105521 The easiest way to reproduce it is to start an Ubuntu 6.06 LTS Live on a system with three

hi all, i am setting up a load balancing netwrok with failover, i have applied julian patch, but whenever i try to traceroute from any client node, it gives me two entries for that destination, but i get different interface for that entries, so it doesn''t forward my requests, i have done masquerading for client nodes, the ip rule/route are as follows, ip rule add prio 222 table

Hi there, I''m trying to achieve the classic load balancing using the multipath. The gateways are: A (tunl0) and B (tunl1) This is the classical situation covered by the HOWTO: one computer with two Internet connections. The problems come when I try to use the same IPs for both A and B. So A is 10.229.25.8 and B 10.229.25.8. I cannot do otherwise, I''m forced to use the

Hi! The Netfilter project proudly presents: nftables 0.6 This release contains many accumulated bug fixes and new features availale up to the Linux 4.7-rc1 kernel release. New features ============ * Rule replacement: You can replace any rule from the unique 64-bits handle. You have to retrieve the handle from the ruleset listing. # nft list ruleset -a table ip filter { chain

https://bugzilla.netfilter.org/show_bug.cgi?id=1221 Bug ID: 1221 Summary: "fib" produces strange results with an IPv6 default route Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: major Priority: P5

Using R 2.7.0 under WinXP. I need to write a function that takes a non-negative vector and returns the parallell maximum between a percentage of this argument and a fixed value. Both the percentages and the fixed values depend on which interval x falls in. Intervals are as follows: >From | To | % of x | Minimum

https://bugzilla.netfilter.org/show_bug.cgi?id=1117 Bug ID: 1117 Summary: Table ipv4-nat prerouting dnat doesn't accept dest IP:PORT Product: nftables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: nft

Dear folks, I had to rewrite UPS::Nut because it was not developed since 2002 and it was based a very old version of upsd speaking a totally outdated protocol. If some of you interested in it you can get from my debian repository. package name is libups-nut-perl. Add this to your APT sources: deb http://debian6.ki.iif.hu/ lenny contrib deb-src http://debian6.ki.iif.hu/ lenny contrib Or simply

https://bugzilla.netfilter.org/show_bug.cgi?id=1138 Bug ID: 1138 Summary: icmpv6 mld-listener-query not detcted Product: nftables Version: unspecified Hardware: x86_64 OS: SuSE Linux Status: NEW Severity: normal Priority: P5 Component: kernel Assignee: pablo at netfilter.org

https://bugzilla.netfilter.org/show_bug.cgi?id=1220 Bug ID: 1220 Summary: Reverse path filtering using "fib" needs better documentation Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: minor Priority: P5 Component: nft

https://bugzilla.netfilter.org/show_bug.cgi?id=1397 Bug ID: 1397 Summary: What am I doing wrong!? Product: nftables Version: unspecified Hardware: x86_64 OS: other Status: NEW Severity: normal Priority: P5 Component: nft Assignee: pablo at netfilter.org Reporter:

I have centos 6 running kvm. IPv4 works perfectly works. But I am having some problem with ipv6, looks like its bridge routing problem but stuck. here are my bridge detail: bridge name bridge id STP enabled interfaces br0 8000.000af75613f2 no eth1 vnet1 br4 8000.000af75613f0 no eth0 ip -6 route shows : unreachable ::/96 dev lo metric 1024 error -101 mtu 65536 advmss 65476 hoplimit 4294967295