It occurs to me that one can do better, but I am not sure how
a Debian package might do the following:

1. create an additional routing table (/etc/iproute/rt_table)
2. add the default route via iodine to that table
3. add a routing policy rule to route packages fwmarked 53 based on
   that additional table
4. tell iptables to mangle/mark outgoing packets to port 53 with
   fwmark 53.

The problem is that this needs modification of /etc/iproute/rt_table
and also iptables, and we don't have policies for either of those
on Debian.

The second example on http://www.linuxhorizon.ro/iproute2.html
illustrates the idea. I think you don't need two additional tables
for this case.

-- 
 .''`.   martin f. krafft <madd...@d.o>      Related projects:
: :'  :  proud Debian developer               http://debiansystem.info
`. `'`   http://people.debian.org/~madduck    http://vcs-pkg.org
  `-  Debian - when you have better things to do than fixing systems

Attachment: digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)

Reply via email to