From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Status: No, hits=0.1 required=5.0 tests=AWL: 0.124,TOTAL_SCORE: 0.124 X-Spam-Level: Message-ID: <47259D61.30201@aaanet.ru> Date: Mon, 29 Oct 2007 11:44:17 +0300 From: "altlinux@aaanet.ru" User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: ALT Linux sysadmin discuss Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Subject: [Sysadmins] =?utf-8?q?netfilter_=D0=B8_iproute?= X-BeenThere: sysadmins@lists.altlinux.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: ALT Linux sysadmin discuss List-Id: ALT Linux sysadmin discuss List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Oct 2007 08:44:40 -0000 Archived-At: List-Archive: всем привет имею два выхода в инет нужно сделать что бы могли входить на различные службы как на один так и на др. интерфейс. ppp999(ppoe средствами etcnet) и eth888(pppoe на модеме и на нем настроен dmz) [root@gate eth888]# ip a 2: lo: mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo 4: lan: mtu 1500 qdisc pfifo_fast qlen 100 link/ether 00:15:17:23:54:b3 brd ff:ff:ff:ff:ff:ff inet 192.168.100.10/24 brd 192.168.100.255 scope global lan 6: eth888: mtu 1500 qdisc pfifo_fast qlen 100 link/ether 00:15:17:23:54:b4 brd ff:ff:ff:ff:ff:ff inet 192.168.23.2/24 brd 192.168.23.255 scope global eth888 8: splan: mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:17:9a:38:1f:a0 brd ff:ff:ff:ff:ff:ff inet 192.168.101.1/24 brd 192.168.101.255 scope global splan 10: eth999: mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:11:95:ed:11:3f brd ff:ff:ff:ff:ff:ff 1: tun1: mtu 1500 qdisc pfifo_fast qlen 100 link/[65534] inet 192.168.202.1 peer 192.168.202.2/32 scope global tun1 111: venet0: mtu 1500 qdisc noqueue link/void 211: ppp999: mtu 1492 qdisc pfifo_fast qlen 3 link/ppp inet ччч.ччч.ччч.ччч peer чч.чч.ччч.225/32 scope global ppp999 пытаюсь промаркировать пакеты идущие на eth888 [root@gate sysconfig]# cat /etc/sysconfig/iptables.conf |grep mark $IPTABLES -A INPUT -t mangle -p ICMP -i $EXTERNAL_IFACE -j MARK --set-mark 1 потом дабвил 201 [root@gate sysconfig]# cat /etc/iproute2/rt_tables # # reserved values # 255 local 254 main 253 default 0 unspec # # local # #1 inr.ruhep 201 cts.inout и дабавил маршрут ip route add default via 192.168.23.1 dev eth888 table cts.inout 192.168.23.1-это IP на модеме [root@gate eth888]# ip rule ls 0: from all lookup local 32765: from all fwmark 0x1 lookup cts.inout 32766: from all lookup main 32767: from all lookup default [root@gate eth888]# ip r 192.168.99.1 dev venet0 scope link src 192.168.101.1 192.168.202.2 dev tun1 proto kernel scope link src 192.168.202.1 xx.xxx.xxx.xxx dev ppp999 proto kernel scope link src xx.xxx.xxx.x 192.168.100.0/24 dev lan proto kernel scope link src 192.168.100.10 192.168.23.0/24 dev eth888 proto kernel scope link src 192.168.23.2 192.168.101.0/24 dev splan proto kernel scope link src 192.168.101.1 192.168.200.0/24 via 192.168.202.2 dev tun1 default via чч.ччч.ч.ччч dev ppp999