NetFilter
[Top] [All Lists]

Re: packets to local addresses

To: netfilter@lists.netfilter.org
Subject: Re: packets to local addresses
From: Pascal Hambourg <pascal.mail@plouf.fr.eu.org>
Date: Sat, 07 Apr 2007 21:27:44 +0200
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
In-reply-to: <Pine.LNX.4.61.0704072040300.22181@yvahk01.tjqt.qr>
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Organization: Plouf !
References: <fad2fb270704060522r4322a223g4e2e40605b3fb6a@mail.gmail.com> <46167157.3080409@rtij.nl> <fad2fb270704070713w37a73f82o3caaf14f987a0f7a@mail.gmail.com> <4617BC88.102@rtij.nl> <Pine.LNX.4.61.0704072040300.22181@yvahk01.tjqt.qr>
Sender: netfilter-bounces@lists.netfilter.org
User-agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)
Hello,

Jan Engelhardt a écrit :
MKS wrote:

What is the best way to change this behaviour, that is force "general"
packets out a specific interface. iptables route target???

Use MARK and iproute2.

This won't work for local addresses. The local routing table is looked up first in the routing process, before any custom ip rule can be examined. So MARK and iproute2 have no effect on the routing of local and broadcast addresses.


<Prev in Thread] Current Thread [Next in Thread>