[linux] netfilter a routing

[Vladislav ANTOLIK]

caf

kukni ci mas zapnuty ipv4_forward
mozno ti helpne stranka http://www.byolinux.org/router.asp

On Fri, 18 Oct 2002,  Ing. Radomil Malec wrote:

> Prijemny piatok vsetkym
> 
> Potreboval by som pomoc s nasledujucim problem, ale poporiatku.
> 
> Topologia siete:
> 
> ____PC1____________       ____SERVER_________
> eth1 - 192.168.65.1 ----- eth1 - 192.168.65.2      ____PC2___________
>                           eth0 - 192.168.1.1 ----- eth0 - 192.168.1.2
> Problem:
> 
> Ping z PC1 iba na SERVER (eth1 aj eth0) a z PC2 ties iba na SERVER (eth0 aj
> eth1), ale nepingnem z PC1 PC2 (a naopak).
> 
> Routovacia tabulka na PC SERVER je:
> 
> Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
> 192.168.65.0    *               255.255.255.0   U     0      0        0 eth1
> 192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
> 127.0.0.0       *               255.0.0.0       U     0      0        0 lo
> 
> PC1 aj PC2 maju default gateway 192.168.65.2 respektive 192.168.1.1
> 
> SERVER je RH 7.3 so standartnym kernelom 2.4.18 z distribucie a predpokladam
> ze "problem" bude niekde v:
> 
> Kernel NETWORKING:
>   x x [*]   IP: multicasting                                              x x
> ? x x [*]   IP: advanced router                                           x x
> ? x x [*]     IP: policy routing                                          x x
> ? x x [*]       IP: use netfilter MARK value as routing key               x x
>   x x [*]       IP: fast network address translation                      x x
>   x x [*]     IP: equal cost multipath                                    x x
>   x x [*]     IP: use TOS value as routing key                            x x
>   x x [*]     IP: verbose route monitoring                                x x
>   x x [*]     IP: large routing tables                                    x x
> ? x x [*]   IP: multicast routing                                         x x
>   x x [*]     IP: PIM-SM version 1 support                                x x
>   x x [*]     IP: PIM-SM version 2 support                                x x
>   x x <M> WAN router                                                      x x
> 
> Prosim poradte ako rychlo rozbehnut routovanie, som tlaceny casom a
> pochopenie advanced routingu ties nieco potrebuje :). Predpokladam ze
> riesenie je v spravnych PREROUTING a POSTROUTING pravidlach v iptables ale
> zatial len tapem. Mohol by niekto potvrdit moje domienky a pripadne aj hodit
> do plena spravne iptables pravidla, ktore to rozbehnu?
> 
> S pozdravom RADO
> 
>