similar to: routing for multiple uplinks + DNAT (LVS in my case)

Been running this for quite a while and noticed that have intermittent problems getting out. Find that if I ping the same site from 2 computers it may work on one and fail on the other. Also was surprised that some time they are going out different interfaces at the same time. Seems to work all the time from the firewall. Running 2.6.10 kernel with the multipath routing patches on a debian

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=452 Summary: DNAT to internal network don't work with source routing and 2 uplinks Product: netfilter/iptables Version: linux-2.6.x Platform: i386 OS/Version: Debian GNU/Linux Status: NEW Severity: normal Priority: P2

Hi, I configured a router box to use 2 providers, as described in the HOWTO. (Apendix 1) I want to use both links to reach a single smtp server. As I read in the kptd and in some old messages of this list, doing a SNAT in the postrouting chain comes _after_ the routing desision. So I guess the following lines I''m trying to use are wrong. (See Apendix 1) What can I do to have multiple

I am trying to determine the optimal filesystem for accessing large numbers of files (25,000+) in a single directory. I have read that ext3fs uses a sequential search algorithm and wanted to verify that this was still indeed the case since this article was published a year ago. http://bulmalug.net/body.phtml?nIdNoticia=1154 <http://bulmalug.net/body.phtml?nIdNoticia=1154&nIdPage=7>

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=452 ------- Additional Comments From mzurakowski-bin@data.pl 2006-02-21 20:06 MET ------- In ip route add .../29 it should be /24 of course. I think that source routing is setup correctly: I can ping/connect to my router through both interfaces from outside no matter how I setup default routing on it. Marcin Z -- Configure bugmail:

Hello, I have this problem: when my mail server on the DMZ starts a connection to the internet it''s ip (213.58.230.26) is "masqueraded" with the firewall ip (213.58.230.50). I wouldn''t mind but there is a one customer who rejects the connection because it makes reverse dns and finds no dns entry for the firewall ip. How can i correct this? Thanks, MSantos shorewall

hi, I''ve a dedicated internet link 512k with a cisco router, and now, I want to upgrade bandwidth with 8 ADSLs (512k each) then: - build kernel 2.4.27 with pachs: - patch-o-matic-ng-20040621 : CONNMARK, H323, etc... - http://www.ssi.bg/~ja/#multigw Julian''s patch. - Activate "equal cost multi path" (Advanced Router-Networking Options) and so on -

Hi all, I have 2 ISPs on a Linux router and a local network with one Linux server and many windows. The local network is masqueraded. I want to give access to port 25 and 80 of my server from any incoming request (i.e. from my 2 ISP). I have made a DNAT translation, witch work but the outgoing answers are not routed correctly. Of course, the de-SNAT process is done before the routing process. So

Hi, I have a suspicious problem with multiple uplinks configuration. First of all my configuration: 1) kernel 2.6.20.3 2) iptables 1.3.7 3) last iproute (for masked marks) All wan interfaces are bridged (stp disabled) in only one interface (wan0), all lan interfaces are bridged (stp enabled) in only one interface (zlan0). The wan0 bridge is to allow UPnP works. To allow related

Hi, I have a big "name problem" with my internal mail server (10.0.0.152). It is "seen" on the internet through DNAT (213.58.230.27). Also there is a MX record pointing to the machine. Everything works fine from the outside. However i can''t set the mail clients on the lan pointing to the mx record, because this one points to 213.58.230.27 and the firewall

Hello, I''m observing a weird bug with ip_nat_ftp in a somewhat more complicated constellation. It''s possible that XEN is also involved in this, but I''m not sure. What I''m trying to do is have XEN guest domains on a host, connected via a bridge into a private network. The the privileged domain attaches to this private network and acts as a NAT router to connect

Hello, there''s a problem I''ve had for several months now, and I''ve never been able to find an answer to it. I''ll try to explain as quick as possible: I have a server that controlls my home network, it provides internet to them also (NAT) and I would like to provide QoS by shaping traffic. I have a p2p server here (running mldonkey), since only that

Hi. Has anybody experienced problems with HTB and latency? The case is: I''m allocating traffic for HTTP traffic. It seems more responsive without using HTB. Regards, Nelson.- -- Homepage : http://geocities.com/arhuaco The first principle is that you must not fool yourself and you are the easiest person to fool. -- Richard Feynman.

Lo, Actualy i'm looking for documents about journalised file system, in order to be able to compare them self. I need accurate information if i want to make a good study. Thoses informations have to permit me to get answer about table like this : Features \ fs | xfs | ext3 | jfs | reiserfs | ------------------------------------------------- chattr | ? | Y | ? | ?

Hi, I read the howto of iproute, I have the same case with HOWTO, the difference is that the whole incoming traffic goes through interface 0, the other difference is that I do not want to balance the out going traffic, because I have specific networks to take it throughout another interface. Mi Case IF1 --> Input and Output IF2 --> Only aoutput for three Network I need Help, How can I

Hi, I''m with a problem here on configuring our server to use multiple uplinks with different providers. The packet goes though on my way, but there is some lost packets that I don''t known where it''s going and causing my link to goes slow and stop sending/receiving data. Here i''m listing the route tables and the rules. It''s only for 1 IP.

Hi! I had two uplinks till today. We stopped one of them today, so i thought i could share my experience. (it is maybe useful for somebody) I hadn''t managed to configure it using a LARTC howto, but the Nano-howto (http://www.ssi.bg/~ja/nano.txt) and julian''s kernel patches. I had some problems with icq connections, because it is a two step connection (It is just theory). 1.

provide me complete detail of your linux box like firewall script (iptables script), kernel''s .config file, multigatway file (i.e. /sbin/ip ....... commands file) so i can check and try to resolve your issue. sonu.... --------------------------------- Do you Yahoo!? Everyone is raving about the all-new Yahoo! Mail Beta. _______________________________________________ LARTC

Next week I''m replacing my single SDSL connection with two ADSL connections. I''ve got a plan for dealing with this, but I''d like any thoughts on potential problems I might run into. My goal is not to load balance the bandwidth (yet), but I do want to run all traffic through a single router. At the moment this router only has one ethernet port for both of the ADSL

Hi folks, i spent my whole day trying to set up my linux router using load balancing with multiple uplinks. I mainly focused on the nano howto, but somewhere I have a big mistake within my head. Basically the load-balancing is working, but not on a per-connection basis - just on a per packet basis. Practically this is not usable of course <g> But as far as I understood it should work..