From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Status: No, hits=0.1 required=5.0 tests=AWL: 0.104,TOTAL_SCORE: 0.104 X-Spam-Level: Message-ID: <4726C2F1.20207@aaanet.ru> Date: Tue, 30 Oct 2007 08:36:49 +0300 From: "altlinux@aaanet.ru" User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: ALT Linux sysadmin discuss References: <47259D61.30201@aaanet.ru> In-Reply-To: <47259D61.30201@aaanet.ru> Content-Type: text/plain; charset=KOI8-R; format=flowed Content-Transfer-Encoding: 8bit Subject: Re: [Sysadmins] =?koi8-r?b?bmV0ZmlsdGVyIMkgaXByb3V0ZQ==?= X-BeenThere: sysadmins@lists.altlinux.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: ALT Linux sysadmin discuss List-Id: ALT Linux sysadmin discuss List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Oct 2007 05:37:14 -0000 Archived-At: List-Archive: мне подсказали и всё решилось не маркировкой а созданием файла [root@gate eth888]# cat ipv4rule from 192.168.23.2 table cts.inout > всем привет > имею два выхода в инет > нужно сделать что бы могли входить на различные службы как на один так и > на др. интерфейс. > ppp999(ppoe средствами etcnet) и eth888(pppoe на модеме и на нем > настроен dmz) > [root@gate eth888]# ip a > 2: lo: mtu 16436 qdisc noqueue > link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 > inet 127.0.0.1/8 scope host lo > 4: lan: mtu 1500 qdisc pfifo_fast qlen 100 > link/ether 00:15:17:23:54:b3 brd ff:ff:ff:ff:ff:ff > inet 192.168.100.10/24 brd 192.168.100.255 scope global lan > 6: eth888: mtu 1500 qdisc pfifo_fast > qlen 100 > link/ether 00:15:17:23:54:b4 brd ff:ff:ff:ff:ff:ff > inet 192.168.23.2/24 brd 192.168.23.255 scope global eth888 > 8: splan: mtu 1500 qdisc pfifo_fast > qlen 1000 > link/ether 00:17:9a:38:1f:a0 brd ff:ff:ff:ff:ff:ff > inet 192.168.101.1/24 brd 192.168.101.255 scope global splan > 10: eth999: mtu 1500 qdisc pfifo_fast > qlen 1000 > link/ether 00:11:95:ed:11:3f brd ff:ff:ff:ff:ff:ff > 1: tun1: mtu 1500 qdisc > pfifo_fast qlen 100 > link/[65534] > inet 192.168.202.1 peer 192.168.202.2/32 scope global tun1 > 111: venet0: mtu 1500 qdisc > noqueue > link/void > 211: ppp999: mtu 1492 qdisc > pfifo_fast qlen 3 > link/ppp > inet ччч.ччч.ччч.ччч peer чч.чч.ччч.225/32 scope global ppp999 > > > пытаюсь промаркировать пакеты идущие на eth888 > [root@gate sysconfig]# cat /etc/sysconfig/iptables.conf |grep mark > $IPTABLES -A INPUT -t mangle -p ICMP -i $EXTERNAL_IFACE -j MARK --set-mark 1 > > потом дабвил 201 > [root@gate sysconfig]# cat /etc/iproute2/rt_tables > # > # reserved values > # > 255 local > 254 main > 253 default > 0 unspec > # > # local > # > #1 inr.ruhep > 201 cts.inout > > и дабавил маршрут > ip route add default via 192.168.23.1 dev eth888 table cts.inout > 192.168.23.1-это IP на модеме > > [root@gate eth888]# ip rule ls > 0: from all lookup local > 32765: from all fwmark 0x1 lookup cts.inout > 32766: from all lookup main > 32767: from all lookup default > > [root@gate eth888]# ip r > 192.168.99.1 dev venet0 scope link src 192.168.101.1 > 192.168.202.2 dev tun1 proto kernel scope link src 192.168.202.1 > xx.xxx.xxx.xxx dev ppp999 proto kernel scope link src xx.xxx.xxx.x > 192.168.100.0/24 dev lan proto kernel scope link src 192.168.100.10 > 192.168.23.0/24 dev eth888 proto kernel scope link src 192.168.23.2 > 192.168.101.0/24 dev splan proto kernel scope link src 192.168.101.1 > 192.168.200.0/24 via 192.168.202.2 dev tun1 > default via чч.ччч.ч.ччч dev ppp999 > > > > _______________________________________________ > Sysadmins mailing list > Sysadmins@lists.altlinux.org > https://lists.altlinux.org/mailman/listinfo/sysadmins >