Re: Two routes to a host: how to make sure which noe is used when?



This usually works just dandy, except when AAA.BBB.EEE.FFF or
AAA.BBB.CCC.DDD tries to connect to my VPN-address (i.e. vpnNNN.domain):
- the packets coming from toto.domain reach me fine through the VPN.
- but my replies seem to be sent via the router.

So replace the redundant host gateway host routes (UGH) through eth1
on vpnNNN.domain with host routes (UH) to the same IP addresses through
the PPP interface instead.

I can't replace them because I want the routes through eth1 as well.
I just want connections which started to go over eth1 to keep happening on
eth1 and those that started over ppp0 to keep happening over ppp0.

Those special hosts are reachable over both interfaces (and that's good),
but those hosts don't know that the packets coming from my ppp0 are coming
from the same machine as those I send from eth1 (the two interfaces have
different IP addresses, for example), so I need to make sure that replies to
packets which arrived on ppp0 are sent back via ppp0 and similarly for eth1.


Stefan
.



Relevant Pages

  • Re: outgoing 10.x.x.x packets being logged
    ... The firewall does not use my ppp0 IP address. ... All traffic coming on eth1 coming anywhere form internal IPs, ... And data from Universe, coming into ppp0, which is related/established, ... All packets which make it till here are dropped silently. ...
    (comp.os.linux.networking)
  • Re: configuring Multiple network cards
    ... Are the boxes at eth1 supposed to send password and file data out to the ... if you set the IP address of eth0 as the default gateway ... eth1 will send all packets there first. ... gw GW route packets via a gateway. ...
    (comp.os.linux.networking)
  • Iptables, iproute2 and multiple ISPs
    ... single machine with eth0 connected to the internal network, eth1 connected ... to a cable modem and ppp0 running to an ISDN provider. ... ought to be able to accept connections to the webserver via ppp0 and have ...
    (comp.os.linux.networking)
  • Re: ping problem ...
    ... ppp0 Link encap:Point-to-Point Protocol ... UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1492 Metric:1 ... /which/ IP gets the packets ... It sounds like you have a little more sophisticated network than your ...
    (comp.os.linux.networking)
  • Re: Firewall with Iptables
    ... allow the computer to accept new incoming and forwarded connection on ... You need to accept packets in the ESTABLISHED and RELATED states too, else connections will hang after the first packet. ... Usually there is a generic rule at the beginning of the chain accepting packets in the ESTABLISHED and RELATED states from any interface. ... So removing the "-i ppp0" in the previous rule should do the trick. ...
    (comp.os.linux.networking)