Re: When the director is the client.

[Joshua Goodall <joshua@xxxxxxxxxxxxxxxxx>]

On Wed, May 12, 2004 at 01:23:51AM +0300, Julian Anastasov wrote:
>       I see that you can remove the limitation when sending
> packets but how do you accept the replies? May be you do not have
> the VIP configured as IP address?

That's right - for regular (external) clients, I'm using fwmark + iproute2
to grab packets intended for the DIP; to capture locally sourced packets,
I just put a -j REDIRECT into the OUTPUT chain of the nat table.

Joshua.

-- 
Joshua Goodall <joshua@xxxxxxxxxxxxxxxxx>
Solutions Architect / Principal Security Architect
myinternet Limited.