From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM autolearn=ham autolearn_force=no version=3.4.1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:subject:references:to:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=MKCx4HsvZfFqNE+U3tws47GPVxJWcuB79omg2z2vu3s=; b=B1xRLeLRPzuB1KcAtjEoejNwmeViuVAEmJGYh4Ura52k6+j/JLyucAeKz0oa6bykYA c+8xu6aXRVmOP/YYhsKzUDTYd8WhohRFxTLPCzsdx0xqiV3D8pQA7M7Yk1lhjpycy6XP BpkD1JUJEM52DlYZ57hYgjryVVozv+lP3w9Nir74881px3Cfx7K7KKAMXvlkFv3iicSA ZCIWhxMZBMl39Eci20QKCDT5+rSqAzXxXiVVmjLCnuDprHf21YdG8so0/Z+T4sjy+CvR AC1YWyJq8ytlnB8nrN6y/XkPcAoRiUZw51bxJ2cBArWog3LO2BR+JGIxBLL1kW77eroc DZPA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:references:to:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=MKCx4HsvZfFqNE+U3tws47GPVxJWcuB79omg2z2vu3s=; b=SIESveBf+H2cpDrily7YVSI9h8FjVsR5qhYwFjP0KZPaLnOzwVrwZ/MXX7WHHEIMIR HiED2B/10CRHUQGAwgMSX57Yn53qEh8ND8KtjlJGIEK77xtZ72sGb04u7CbAl9u6zAFP K107suVXQhyr1H38kCJg7jg++lQoxLU+LkS1dn8FtnCwlsJnxjb81Ojy8A0VCf/4JCvL HPN41TYDH/d77IKOPglaWjj89NC1m9CO5Yy/tEhJFagsKrzDubsi/cp8H8GD6Ll4lIC3 pDPAYMTkTrxc0fwc4u+EDT9JysagftikJ16zlnfjAtqH7e59iPFTMwnP7oyKpVEf81x9 p4mQ== X-Gm-Message-State: AKaTC01jHWqqcppsU114Qfj0i3Vhep8Cb1CqiWvTqWcZqfl98kJ41gZNAJlfdXuYbB3X0A== X-Received: by 10.194.127.40 with SMTP id nd8mr32904984wjb.43.1480521124310; Wed, 30 Nov 2016 07:52:04 -0800 (PST) From: "=?UTF-8?B?0JLQsNC00LjQvCDQmNC70LvQsNGA0LjQvtC90L7Qsg==?=" X-Google-Original-From: =?UTF-8?B?0JLQsNC00LjQvCDQmNC70LvQsNGA0LjQvtC90L7Qsg==?= References: <0663db38-58b3-a453-245e-bf0c8f3a566f@gmail.com> To: ALT Linux sysadmins' discussion Message-ID: <09fd0d44-1e6d-6e4a-8bee-7cf0b81757ce@gmail.com> Date: Wed, 30 Nov 2016 23:52:00 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.5.0 MIME-Version: 1.0 In-Reply-To: <0663db38-58b3-a453-245e-bf0c8f3a566f@gmail.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Subject: Re: [Sysadmins] =?utf-8?b?0YDRg9GC0LXRgCDQvdCwIG5mdGFibGVz?= X-BeenThere: sysadmins@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux sysadmins' discussion List-Id: ALT Linux sysadmins' discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 15:52:06 -0000 Archived-At: List-Archive: 30.11.2016 23:22, Вадим Илларионов пишет: > Пытаясь перепилить шлюз с иптаблиц на сабж, упёрся в пару неясностей в таблице mangle: > > 1. Цепочка forward > TCPMSS tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU > > 2. Цепочка postrouting > TTL all -- 0.0.0.0/0 0.0.0.0/0 TTL match TTL == 1 TTL set to 64 # nft add rule mangle postrouting ip ttl == 1 counter ip ttl 64 Не оно ли? По крайней мере, добавилось без ругани и пакетики считаются. Осталось оттестировать результат. А вот по первому вопросу пока голяк. -- Мимо крокодил. WBR, rednex CIO. JID = Skype = $local_part@ Viber = +7(964)103-65-67 Опции rsync -aHAX --delete мозг автоматом переводит как "удалить к чёртовой матери!"