Hi,

Here we go:

0:      from all lookup local
999:    from all lookup main
10000:  from all fwmark 0x1/0xff lookup 1
10001:  from all fwmark 0x2/0xff lookup 2
20000:  from 10.13.70.138 lookup 1
20000:  from 192.168.195.227 lookup 2
32765:  from all lookup 250
32767:  from all lookup default

Thanks,

Adam.



On 07/27/2017 05:10 PM, Tom Eastep wrote:
On 07/26/2017 11:34 PM, Adam Cécile wrote:
Hello,

I made a quick setup using PBR to migrate a server from an old network
to a new one.

Here is the provider file:

#NAME   NUMBER  MARK    DUPLICATE       INTERFACE       GATEWAY
OPTIONS         COPY
NEW     1       1       -               eth0            10.13.70.190
track
OLD     2       2       -               eth1            192.168.195.254
track

And the interfaces:

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
         inet 10.13.70.138  netmask 255.255.255.192  broadcast 10.13.70.191

eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
         inet 192.168.195.227  netmask 255.255.255.0  broadcast
192.168.195.255


Everything is working correctly except PBR seems to be overrided if the
client is directly connected on one of the local network.

For instance, if I ssh this server from another machine in
192.168.195.0/24 on its 10.13.70.138 address, I see packet coming from
eth0 but response sent throught eth1.

What is the output of 'ip rule ls'?

Thanks,
-Tom


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to