[linux] netfilter a routing

[Ing. Radomil Malec]

Prijemny piatok vsetkym

Potreboval by som pomoc s nasledujucim problem, ale poporiatku.

Topologia siete:

____PC1____________       ____SERVER_________
eth1 - 192.168.65.1 ----- eth1 - 192.168.65.2      ____PC2___________
                          eth0 - 192.168.1.1 ----- eth0 - 192.168.1.2
Problem:

Ping z PC1 iba na SERVER (eth1 aj eth0) a z PC2 ties iba na SERVER (eth0 aj
eth1), ale nepingnem z PC1 PC2 (a naopak).

Routovacia tabulka na PC SERVER je:

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.65.0    *               255.255.255.0   U     0      0        0 eth1
192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
127.0.0.0       *               255.0.0.0       U     0      0        0 lo

PC1 aj PC2 maju default gateway 192.168.65.2 respektive 192.168.1.1

SERVER je RH 7.3 so standartnym kernelom 2.4.18 z distribucie a predpokladam
ze "problem" bude niekde v:

Kernel NETWORKING:
  x x [*]   IP: multicasting                                              x x
? x x [*]   IP: advanced router                                           x x
? x x [*]     IP: policy routing                                          x x
? x x [*]       IP: use netfilter MARK value as routing key               x x
  x x [*]       IP: fast network address translation                      x x
  x x [*]     IP: equal cost multipath                                    x x
  x x [*]     IP: use TOS value as routing key                            x x
  x x [*]     IP: verbose route monitoring                                x x
  x x [*]     IP: large routing tables                                    x x
? x x [*]   IP: multicast routing                                         x x
  x x [*]     IP: PIM-SM version 1 support                                x x
  x x [*]     IP: PIM-SM version 2 support                                x x
  x x <M> WAN router                                                      x x

Prosim poradte ako rychlo rozbehnut routovanie, som tlaceny casom a
pochopenie advanced routingu ties nieco potrebuje :). Predpokladam ze
riesenie je v spravnych PREROUTING a POSTROUTING pravidlach v iptables ale
zatial len tapem. Mohol by niekto potvrdit moje domienky a pripadne aj hodit
do plena spravne iptables pravidla, ktore to rozbehnu?

S pozdravom RADO

------------- další část ---------------
Netextová příloha byla odstraněna...
JmĂŠno: mail
Typ: application/octet-stream
Velikost: 2346 bytes
Popis: [Şådný popis není k dispozici]
Url : http://lists.linux.sk/pipermail/linux/attachments/20021018/fb724fb7/attachment.obj