<< | Thread Index | >> ]    [ << | Date Index | >> ]

To: "Mark Smith" <mark.smith,AT,avcosystems,DOT,co,DOT,uk>
Subject: RE: routing, cipe using wrong interface (long)
From: Markus Röder <markus.roeder,AT,makeit4u,DOT,de>
Date: Fri, 23 Jan 2004 15:23:09 +0100
Cc: cipe-l,AT,inka,DOT,de
In-reply-to: <NCBBJMDMDGNNDPEKGMOMCEDKEFAD.mark.smith@avcosystems.co.uk>
References: <5.2.0.9.0.20040123142732.00afe290@pop3.makeit4u.de>

The packet counters do increase, the cipe controll-messages seem to get delivered correctly
( cipcb0: setkey, cipcb0: cipe_recvmsg , cipcb0: cipe_sendmsg)


# iptables -t mangle -L -v -n
[...]
Chain OUTPUT (policy ACCEPT 273K packets, 83M bytes)
pkts bytes target prot opt in out source destination
119 24639 MARK udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:9001 MARK set 0x1
[...]


A little later
# iptables -t mangle -L -v -n
[...]
Chain OUTPUT (policy ACCEPT 274K packets, 83M bytes)
pkts bytes target prot opt in out source destination
136 28787 MARK udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:9001 MARK set 0x1
[...]


At 13:50 23.01.2004 +0000, you wrote:
Markus,

OK, didn't see that in the original post, even though you did mention it.
Sounds like your iptables mark rule isn't firing.  Is the packet counter
going up?  Could it be that there's an earlier rule matching the packet and
dropping out of the chain?

--
Mark Smith - Avco Systems Ltd
email: mark.smith,AT,avcosystems,DOT,co,DOT,uk
Tel: +44 (0)1784 430996 Fax: +44 (0)1784 431078


-- Message sent by the cipe-l,AT,inka,DOT,de mailing list. Unsubscribe: mail majordomo,AT,inka,DOT,de, "unsubscribe cipe-l" in body Other commands available with "help" in body to the same address. CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>


<< | Thread Index | >> ]    [ << | Date Index | >> ]