[rhelv6-list] network problem on RHEL6.3

[Ron van der Wees]

Ah die camp in .fr is vlak bij cap d agde. Wij zijn veel in valras en een keer in vias geweest. Een beetje weer gehad daar?

Wij gaan naar zaton, kroatie.

Ron

John Haxby <john.haxby at gmail.com> wrote:



On 4 July 2012 13:59, Manuel Wolfshant <wolfy at nobugconsulting.ro> wrote:

On 07/04/2012 03:46 PM, John Haxby wrote:


Loose mode reverse path filtering isn't usually recommended, though, not least because asymmetric routing can mess up TCP's flow control.   I keep hoping that someone will post a succinct guide to having packets route back through the interface they came in on (I know it can be done, I've just never sat down and worked it out in detail.)


EXTERNAL_INTERFACE1="eth1.5"
EXTERNAL_INTERFACE2="eth1.6"
$IPTABLES -t mangle -A PREROUTING -j CONNMARK --restore-mark
$IPTABLES -t mangle -A PREROUTING -i "$EXTERNAL_INTERFACE1" -j MARK --set-mark 2
$IPTABLES -t mangle -A PREROUTING -i "$EXTERNAL_INTERFACE2" -j MARK --set-mark 3
$IPTABLES -t mangle -A POSTROUTING -j CONNMARK --save-mark



[root at mail ~]# grep mark /etc/sysconfig/network-scripts/rule-eth*
/etc/sysconfig/network-scripts/rule-eth1.5:fwmark 2 table T1
/etc/sysconfig/network-scripts/rule-eth1.6:fwmark 3 table T2


The rest is left as exercise for the reader



Thank you very much!

jch




-- 
Phear the Penguin

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/rhelv6-list/attachments/20120704/a21c2e16/attachment.htm>