RE: routing, cipe using wrong interface (long)
Markus Röder <[email protected]> Fri, 23 Jan 2004 15:23:09 +0100
| Newsgroups | gmane.comp.encryption.cipe |
|---|---|
| Message-ID | <[email protected]> |
The packet counters do increase, the cipe controll-messages seem to get delivered correctly ( cipcb0: setkey, cipcb0: cipe_recvmsg , cipcb0: cipe_sendmsg) # iptables -t mangle -L -v -n [...] Chain OUTPUT (policy ACCEPT 273K packets, 83M bytes) pkts bytes target prot opt in out source destination 119 24639 MARK udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:9001 MARK set 0x1 [...] A little later # iptables -t mangle -L -v -n [...] Chain OUTPUT (policy ACCEPT 274K packets, 83M bytes) pkts bytes target prot opt in out source destination 136 28787 MARK udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:9001 MARK set 0x1 [...] At 13:50 23.01.2004 +0000, you wrote: >Markus, > >OK, didn't see that in the original post, even though you did mention it. >Sounds like your iptables mark rule isn't firing. Is the packet counter >going up? Could it be that there's an earlier rule matching the packet and >dropping out of the chain? > >-- >Mark Smith - Avco Systems Ltd >email: [email protected] >Tel: +44 (0)1784 430996 Fax: +44 (0)1784 431078 > > >-- >Message sent by the [email protected] mailing list. >Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body >Other commands available with "help" in body to the same address. >CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html> -- Message sent by the [email protected] mailing list. Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body Other commands available with "help" in body to the same address. CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>