Re: iproute2 problems.
- From: Pascal Hambourg <boite-a-spam@xxxxxxxxxxxxxxx>
- Date: Wed, 21 Feb 2007 00:52:58 +0100
Hello,
ichi.brown@xxxxxxxxx a écrit :
eth0 - external ip
eth1 - internal ip
Don't you mean "interface" instead of "ip" ?
i'm forwarding an external ip to the internal interface at a port
that's responding.
What do you mean exactly ? Please explain the complete setup, network, hosts, addresses, NAT rules...
i can connect to the internal ip just fine.
%telnet 10.x.x.x 25
Trying 10.x.x.x...
Connected to xxxx.
Escape character is '^]'.
220 xxxx ESMTP
i need a higher port forwarded to port 25 on that machine for a couple
of asinine reasons. this is what i see when i tcpdump the eth1
interface without iproute2 rules in place.
%telnet 63.x.x.x smtps
Trying 63.x.x.x...
^C
# tcpdump -i eth1 host 206.x.x.x
tcpdump: listening on eth1
13:00:32.048622 206.x.x.x.1325 > 10.x.x.x.smtp: S
3731510172:3731510172(0) win 57344 <mss 1460> (DF)
What is 206.x.x.x ?
# tcpdump -i eth0 host 206.x.x.x
tcpdump: listening on eth0
13:00:44.621421 10.x.x.x.smtp > 206.x.x.x.1325: S
2172768788:2172768788(0) ack 3731510173 win 5792 <mss
1460,nop,nop,timestamp 33133661 50571017,nop,wscale 0> (DF)
so as you can see without the iproute2 rule, the 10.x.x.x traffic
leaves through the 63.x.x.x interface.
Do you mean eth0 ?
Of course it does : according to your routing table the destination 206.x.x.x matches the default route which goes through eth0. So why would you want it to do otherwise ?
.
- References:
- iproute2 problems.
- From: ichi.brown@xxxxxxxxx
- iproute2 problems.
- Prev by Date: Re: iptables port forwarding fails when adding third NIC (r8169) Kernel: 2.6.17-1.2174_fC5
- Next by Date: Re: Which ICMP reject works best
- Previous by thread: iproute2 problems.
- Next by thread: Where can I get network-admin package?
- Index(es):
Relevant Pages
|