Re: debian server with two public IPs

Path	csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod
From	<tomas@tuxteam.de>
Newsgroups	linux.debian.user
Subject	Re: debian server with two public IPs
Date	Mon, 20 Mar 2023 10:30:01 +0100
Message-ID	<Gbk01-dLoR-5@gated-at.bofh.it> (permalink)
References	<Gbihz-dKhg-3@gated-at.bofh.it> <Gbjnj-dKVO-1@gated-at.bofh.it> <GbjQl-dLln-5@gated-at.bofh.it>
X-Mailbox-Line	From debian-user-request@lists.debian.org Mon Mar 20 09:21:43 2023
Old-Return-Path	<tomas@tuxteam.de>
X-Amavis-Spam-Status	No, score=-12.1 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5] autolearn=ham autolearn_force=no
X-Policyd-Weight	using cached result; rate:hard: -4.6
MIME-Version	1.0
Content-Type	multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="IoLeq/1DVfcXzF0h"
Content-Disposition	inline
X-Mailing-List	<debian-user@lists.debian.org> archive/latest/797497
List-ID	<debian-user.lists.debian.org>
List-URL	<https://lists.debian.org/debian-user/>
List-Archive	https://lists.debian.org/msgid-search/ZBgll4S3PRd/fp0s@tuxteam.de
Approved	robomod@news.nic.it
Lines	52
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Mon, 20 Mar 2023 10:21:27 +0100
X-Original-Message-ID	<ZBgll4S3PRd/fp0s@tuxteam.de>
X-Original-References	<b196ac0ef74218c1200e7337e82baaab@dnsbed.com> <CAOQdWPEC3hxp=a2=CK-1jmro3MLH8R22+-GKs7EteHegi3zN_A@mail.gmail.com> <d515bfd7-f2a4-ae58-9dd5-07ad88b8eead@ardley.org>
Xref	csiph.com linux.debian.user:256212

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

On Mon, Mar 20, 2023 at 05:15:57PM +0800, Jeremy Ardley wrote:
> 
> On 20/3/23 16:39, Stanislav Vlasov wrote:
> > пн, 20 мар. 2023 г. в 12:33, <fh@dnsbed.com>:
> > 
> > > I have a networking question that I can't understand for.
> > > I have the Debian 11 host with two ethernet cards.
> > > There is public IP and gateway for each ethernet card.
> > > (they are public IPs from two different net address blocks.)
> > [...]
> > > When clients from outside access eth1 ip (such as HTTP access), they can
> > > reach there.
> > > But, the returned packages from debian server to clients are always
> > > coming from eth0 gw.
> > > I expect the returned package also come from eth1 gw (since clients are
> > > accessing eth1 address).
> > 
> > https://lartc.org/ will help you.
> > Exactly https://lartc.org/howto/lartc.rpdb.multiple-links.html
> > In my same setup i was add some 'up ip rule add ...' lines into
> > /etc/network/interfaces
> 
> I get the impression the problem is to send return traffic back out on the
> interface it came in on.

If this is it, then rp_filter, as I proposed elsewhere in this
thread, seems like exactly made for this.

Cheers
-- 
t

Thread

debian server with two public IPs fh@dnsbed.com - 2023-03-20 08:40 +0100
  Re: debian server with two public IPs <tomas@tuxteam.de> - 2023-03-20 09:30 +0100
  Re: debian server with two public IPs Stanislav Vlasov <stanislav.v.v@gmail.com> - 2023-03-20 09:50 +0100
    Re: debian server with two public IPs Jeremy Ardley <jeremy@ardley.org> - 2023-03-20 10:20 +0100
      Re: debian server with two public IPs <tomas@tuxteam.de> - 2023-03-20 10:30 +0100
        Re: debian server with two public IPs Jeremy Ardley <jeremy@ardley.org> - 2023-03-20 10:50 +0100
    Re: debian server with two public IPs fh@dnsbed.com - 2023-03-21 01:00 +0100
  Re: debian server with two public IPs Tim Woodall <debianuser@woodall.me.uk> - 2023-03-20 11:30 +0100

csiph-web