Hi Daniel sorry for the HTML format
> On 06 Jul 2015, at 16:07, Daniel Wagner <w...@monom.org> wrote: > > Hi > > [html formated mails are almost certainly blocked on this mailing list] > >> Adding than the following: >> root@ale:/# *ip route add default via 192.168.1.1 table 256* >> root@ale:/# *echo 1 > /proc/sys/net/ipv4/ip_forward* >> root@ale:/# *for f in /proc/sys/net/ipv4/conf/*/rp_filter ; do echo 0 > >> $f ; done* >> root@ale:/# *echo 0 > /proc/sys/net/ipv4/route/flush* > > Are the last 3 commands necessary? Sincerely I have to retry and see if those three commands are strictly necessary or we can live whiteout. > I am surprised local generated > packets travel through the nat table. > >> and especially the following two lines: >> root@ale:/# *iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source >> 192.168.1.100* >> root@ale:/# *iptables -t nat -A POSTROUTING -o wlan0 -j SNAT --to-source >> 192.168.43.26 >> * > > So it is necessary to change the source IP address in the NAT table. I > wonder why this isn't happening with the policy routing table entry? I was thinking that the NAT table is used here because of some security configurations and especially the Firewall, but my analysis stops because I sow that having the two connection in parallel is possibile but not with the actual version of ConnMan (please correct me if I’m wrong and you were able to have it whiteout my hack). @ConnMan DEV: are there some plans to deliver this kind of functionality in the near future (with also the PATCH you Daniel point to me concerning the DBus interfaces for Policy Rules)? > >> I’ve got now: >> wifisession@:~$ *curl ifconfig.me <http://ifconfig.me/> <http://ifconfig.me >> <http://ifconfig.me/>>* >> 5.170.189.246(wifi) >> >> ethsession@:~$ *curl **ifconfig.me <http://ifconfig.me/> <http://ifconfig.me >> <http://ifconfig.me/>>** * >> 80.21.33.250(eth) >> >> i.e.: the routing is correctly done discriminating UID. > > Cool, so at least we are on the right track here. > > cheer, > daniel Cheers Gianfranco _______________________________________________ connman mailing list connman@connman.net https://lists.connman.net/mailman/listinfo/connman
