Re, > Have you tried disabling reverse path filtering? > echo 0 > /proc/sys/net/conf/eth0/rp_filter
Spot on! This was the issue. I set up rp_filter (I didn't know this parameter before your answer) to be 'loose'. Indeed in my case the packet was silently dropped because a packet coming from 123.2.2 was coming on eth1 being the 10.1.1 network. And because eth0 was 123.2.2, the kernel thought "Wait a minute a packet from 123.2.2 should be seen on eth0, not eth1! This does not look right, I am going to, silently, drop it !". Being "loose", echo 2 > /proc/sys/net/conf/eth1/rp_filter allows any networks on the server to be allowed to arrive on eth1. So eth0's network is ok to be seen on eth1. Disabling rp_filter (echo 0) allows anything, which would work as well but the loose option (echo 2) is more conservative without being too much of a nazi :) Anyway, thanks a lot David for pointing that out ! Cheers, Tom _______________________________________________ Please read the documentation before posting - it's available at: http://www.linuxvirtualserver.org/ LinuxVirtualServer.org mailing list - [email protected] Send requests to [email protected] or go to http://lists.graemef.net/mailman/listinfo/lvs-users
