Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.networking > #2629
| From | Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> |
|---|---|
| Newsgroups | comp.os.linux.networking |
| Subject | Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) |
| Date | 2013-12-07 16:14 +0100 |
| Organization | Plouf ! |
| Message-ID | <l7ve02$2m3f$1@saria.nerim.net> (permalink) |
| References | <gof.1386078295.6555@somewhere.invalid> <l7lohu$2ja0$1@saria.nerim.net> <gof.1386419753.23694@somewhere.invalid> |
Adam Wysocki a écrit : > >>> but traffic still gets through the main table. >> How do you know ? > > Main table doesn't have default route, so: > > [gof@raid ~]$ ping 1.2.3.4 > connect: Network is unreachable > > [gof@raid ~]$ telnet 1.2.3.4 1234 > Trying 1.2.3.4... > telnet: Unable to connect to remote host: Network is unreachable That's the result of the first routing decision which happens while the packet is being built, before it is passed to iptables' OUTPUT chains and marked. Thus the main routing table must have a default route (possibly with a nonexistent gateway so that packets won't actually be sent out using it) to avoid this error. However routing of incoming packets should have worked.
Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
iproute2 fwmark doesn't work (or iptables --set-mark doesn't) gof@somewhere.invalid (Adam Wysocki) - 2013-12-03 13:45 +0000
Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2013-12-03 16:46 +0200
Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) gof@somewhere.invalid (Adam Wysocki) - 2013-12-03 18:07 +0000
Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-03 23:58 +0100
Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-04 00:13 +0100
Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) gof@somewhere.invalid (Adam Wysocki) - 2013-12-07 12:36 +0000
Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-07 16:14 +0100
Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2013-12-07 16:21 +0100
Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) logsnaath@gmail.com - 2014-08-03 13:06 -0700
Re: iproute2 fwmark doesn't work (or iptables --set-mark doesn't) Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-08-03 23:22 +0200
csiph-web