In article <Pine.GSO.3.96.990612194604.11509A-100000@shell>,
jamal <[EMAIL PROTECTED]> wrote:
>If i understood you correctly:
>
>1) add an extra table (table 50 below) which just routes by fwmark:
>
>NOTE: all your other routes go to the main routing table
>
>ip route add table 50 0/0 via goodISPgateway dev goodISPdev
>
>ip ro ls table 50 to show the entry
>ip ro ls will give you entries on the main table
>and route -n should still work
>
>2) create your ipchains entry on the input chain
>
>ipchains -I input -p tcp -d 0/0 www -m 1
>
>ipchains -L to list
>
>3) Add the rule to redirect fw mark 1 to table 50
>ip ru add fwmark 1 table 50
Ah...to get this line I had to upgrade my iproute...
>Since i havent tested this you might need to play with it a
>little.
What this does is:
1. Permanently disable the load balancing that was working, (with the
same gateway on both interfaces; see my other posting on this
thread) and
2. Nothing else, as far as I can tell.
It looks like there are bugs lurking here. Here's the initial setup:
route add default gw goodISPgateway goodISPdev
route add goodISPgateway badISPdev
route add default gw goodISPgateway badISPdev
All is well here with equal cost multipath; if I telnet to two different
hosts, the two connections each originate from a different one of the
two interfaces.
ipchains -I input -p tcp -d 0/0 80 -m 1
This actually happens first; it doesn't seem to make a different either
way.
ip route add table 50 0/0 via goodISPgateway dev goodISPdev
ip rule add fwmark 1 table 50
Somewhere in there, the equal cost multipath abruptly stops working.
The routing code is unable to see the default route to goodISPdev from
this point on. Ever. No amount of manipulation of any of the routing
tables seems to make the Internet reachable again, so I have to reboot
the machine at this point.
--
Zygo Blaxell, Linux Engineer, Corel Corporation. [EMAIL PROTECTED] (work) or
[EMAIL PROTECTED] (play). Opinions above are my own, not Corel's.
Linux washu 2.2.8 #2 Thu May 13 21:14 EDT 1999 i686 up 1 day, 8:59
Linux mokona 2.2.9 #1 Jun 12 02:07 EDT 1999 i586 up 1 day, 2:05
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
