linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Wilmer van der Gaast <lintux@lintux.cx>
To: Patrick McHardy <kaber@trash.net>
Cc: linux-kernel@vger.kernel.org,
	Netfilter Development Mailinglist 
	<netfilter-devel@lists.netfilter.org>
Subject: Re: 2.4.23 masquerading broken?
Date: Wed, 3 Dec 2003 01:45:19 +0100	[thread overview]
Message-ID: <20031203004518.GL615@gaast.net> (raw)
In-Reply-To: <3FCD20F1.6090800@trash.net>

[-- Attachment #1: Type: text/plain, Size: 1337 bytes --]

Patrick McHardy (kaber@trash.net) wrote:
> It may be related to using advances routing features ..
> Can you give information about the specific IPs ? Is it local traffic ?
> 
It happens when a packet to a host outside 130.89.*.* is routed through
the eth1 (130.89.203.37) interface. That happens with any traffic not
from .9.11 or .9.13. .9.11 and .9.13 don't have any problems, their
traffic is routed to the other Internet interface without any problems.

Also, traffic to 130.89.*.* from any host is routed to eth1 correctly
and "even" works.

So, in short:

192.168.9.10 -=> 130.89.1.1 works, through eth1
192.168.9.11 -=> 130.89.1.1 works, through eth1
192.168.9.10 -=> www.google.com doesn't work
192.168.9.11 -=> www.google.com works, through hensema (which is what I want)

Also, trying to ping www.google.com through eth1 (hensema is the default
interface) from the bugging machine directly works.

I hope this clarifies something... If not, I can do some more testing
tomorrow.


Greetings,

Wilmer van der Gaast.

-- 
+-------- .''`.     - -- ---+  +        - -- --- ---- ----- ------+
| lintux : :'  :  lintux.cx |  | OSS Programmer   www.bitlbee.org |
|   at   `. `~'  debian.org |  | www.algoritme.nl   www.lintux.cx |
+--- -- -  ` ---------------+  +------ ----- ---- --- -- -        +

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

  reply	other threads:[~2003-12-03  0:45 UTC|newest]

Thread overview: 10+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-12-02 16:56 2.4.23 masquerading broken? Wilmer van der Gaast
2003-12-02 17:25 ` Patrick McHardy
2003-12-02 17:33   ` Wilmer van der Gaast
2003-12-02 20:18     ` snpe
2003-12-02 23:32     ` Patrick McHardy
2003-12-03  0:45       ` Wilmer van der Gaast [this message]
2004-01-10 21:59   ` Harald Welte
2004-01-11 10:40     ` Patrick McHardy
2004-01-11 12:08       ` Patrick McHardy
2003-12-03 10:30 ` 2.4.23 masquerading broken? key.oif = 0; perhaps in bad position ? Zoran Davidovac

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20031203004518.GL615@gaast.net \
    --to=lintux@lintux.cx \
    --cc=kaber@trash.net \
    --cc=linux-kernel@vger.kernel.org \
    --cc=netfilter-devel@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).