/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */ [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > ...all the outbound packets are MASQed as coming from the "real" > external ip address (.100) instead of the alias that I want them to be > MASQed as (.1) The packets will be masq'd as coming from the interface that the packets were routed to. Where does your default route point? Does it point to the .100 interface? Then that's what IP will be chosen. Because that's where you routed the traffic to. It's as simple as that. > Apparently this problem requires the iproute2 solution, in order to do > source address routing. That's right. If you route the data to a different interface, it will be masq'd with that interface's IP address. See how simple that is? > I just don't like the idea of replacing my routing framework with an > undocumented and semi-mysterious RPM from Russia.... That's quite unerstandable, for any security-concious administrator, which I would hope that everyone here is one. But surely there is source code available that can be examined, yes? > The big disclaimer in the latest ipmasq howto seems to point to > iproute2 to solve this sort of problem, but then says it won't work > with MASQed addresses, and then says none of the gurus will answer > questions about it. I guess I need to read the howto more often. But I know that I, personally, can't answer questions about this subject, because I am not in a position to try it, and so, I have no knowledge, and can't really get any experience with it. Maybe when my multi-IP DSL setup comes to fruition, I can try such things and report back to the list. -- [EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience. sometimes known as David DeSimone || Experience comes from bad judgment." http://www.dallas.net/~fox/ || -- Life Lessons _______________________________________________ Masq maillist - [EMAIL PROTECTED] Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! or email to [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting. You can start your search at http://www.indyramp.com/masq/ Please keep general linux/unix/pc/internet questions off the list.
