Re: Routing by port.

tzanger (tzanger@ubercool.ml.org)
Wed, 25 Nov 1998 14:48:44 -0500 (EST)


> ipchains -A input -p tcp -d 0.0.0.0/0 80 -t 0x01 0x80
> ip ru from 192.168.0.14 tos 0x08 table 4

(I'm assuming you meant 0x01 0x08 since your ip route looks fine)

> But this doesn't work. (ip ro table 4 is working well. I've a similar
> rule checking only for some other ip and it works.)

>From my understanding (I too have multiple routes, one for high throughput
and another for everything else) but I have found that you cannot route by
ToS any packets *originating* from the box you're routing via ToS with.
It's a pain in the ass but from what I have gathered it has something to
do with the fact that packets *originating* on the machine don't pass
through the IP chains (except for output) and hence never ever get
marked. Unfortuantely, once they are in the output chain, they're already
past the routing table.

To anyone following this thread... is it possible to create a program
which could attach itself to the tail end of a given program and force a
specific ToS setting? i.e. I theoretically should be able to change the
qmail packet program to automatically set ToS 0x08 and then it should
route fine, but I am unsure of this. :-)

or a program which would be a cross between a spoofer and a redirector?
i.e. sits on port 12345 and anything coming in would be sent off to its
original destination, but with a spoofed source address? This would be
idea for my satellite uplink and would eliminate the need to have another
box.

Andrew

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/