[go: up one dir, main page]
Menu ▾ ▴

[41c17c]: / fw.sh  Maximize  Restore  History

Download this file

19 lines (15 with data), 727 Bytes 

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
iptables  -A  PREROUTING  -t  mangle -i vout+ ! -s 192.168.1.128/30 -j  MARK --set-mark 0xf

iptables  -A  PREROUTING  -t  mangle -i vout+ ! -s 192.168.1.128/30 -j  CONNMARK --save-mark

iptables  -A FORWARD -i vout+ -o eth0 -m mark --mark 0xf -j ACCEPT

iptables -A POSTROUTING -t nat -m mark --mark 0xf -j SNAT --to-source 192.168.1.10

iptables -A PREROUTING -t  mangle -i eth0 -m mark --mark 0xf -j LOG  --log-prefix  MARKKK



#

ip ru add iif eth0 fwmark 15 table 15

ip ro add default dev vout table 15



# test: ip ro get 4.0.0.4 mark 15 from 1.2.3.4 iif eth0

# expected output :

# 4.0.0.4 from 1.2.3.4 dev vout table whack mark 15 

#    cache iif eth0 



# if everything else fails :

# ip ro add 4.0.0.4/32 dev vout table 15

#