> That's your problem. The Linux box with multiple gateways needs nat. At
> least that was a requirement back in the day. Pretty sure nothing has
> change there. Part of what Julian's patches address as well.
>
> When I had a setup like yours. I did two rounds of NAT/PAT. Once in each
> of the routers, then again in the Linux router for the multiple gateway
> thing to work.
>
> Try doing nat in your Linux box as well, and you should see some better
> results.


Yes I've tryd it. I did it by
-A POSTROUTING -s 192.168.200.10 -o eth0 -j SNAT --to-source 80.48.56.70
-A POSTROUTING -s 80.48.56.70 -o eth1 -j SNAT --to-source 192.168.200.10

And it was working at least the connections with bad src ip was nated and they 
wasn't drop by ISP routers  due to wrong src ip. It was happen when for example 
router with ip 80.48.56.65 recived packet from 192.168.200.10. The nat realy 
help. However with this solution my connections are natted and wan't be able to 
make direcct connections ie p2p, Will I?

But why this is happen? In my opinion there is still some bug because the gw 
should change in each "hop" like the src adress is changing. Nat only fix the 
wrong src addres but not resolve this problem... or maby this is normal 
behaviour of load-balancing ? I don't think so...

I make simple test:
 lucy linux # ip ro ge 80.48.56.3
80.48.56.3 via 80.48.56.65 dev eth0 src 192.168.200.10
 cache mtu 1500 advmss 1460 metric 10 128
lucy linux # ip ro ge 80.48.56.2
80.48.56.2 via 80.48.56.65 dev eth0 src 80.48.56.70
 cache mtu 1500 advmss 1460 metric 10 128
lucy linux # ip ro ge 80.48.56.1
80.48.56.1 via 80.48.56.65 dev eth0 src 192.168.200.10
 cache mtu 1500 advmss 1460 metric 10 128
lucy linux # ip ro ge 80.48.56.4
80.48.56.4 via 80.48.56.65 dev eth0 src 80.48.56.70
 cache mtu 1500 advmss 1460 metric 10 128


----------------------------------------------------------------------
Samochod zwany EOS... >>> http://link.interia.pl/f191c

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Reply via email to