On Wed, 5 May 1999, Peter Kese wrote:
> This is the 2.2 Virtual Server patch for the Linux kernel version 2.2.7.
> It was not very well tested, so please be careful with it.
Well, we tried it out today using masqueraded servers and it did not work.
ipchains -F forward
ipchains -A forward -j MASQ -s 10.0.2.0/24 -d 0/0
/sbin/ipvsadm -C
/sbin/ipvsadm -A -t 209.183.99.78:1975 -s rr
/sbin/ipvsadm -a -t 209.183.99.78:1975 -r 10.0.2.101 -m
/sbin/ipvsadm -a -t 209.183.99.78:1975 -r 10.0.2.104 -m
The masquerading table would have valid entries in it but they were not
being forwarded. I even doubled checked the ipchains-HOWTO to make sure I
didn't forget how chains worked.
I'm looking at the src but I'm having a bit of a time trying to trace the
logic in ip_fw_demasquerade(). I suspect the problem is there since the
masq tables actually have entries but the real server does not receive a
connection.
-----
Christopher Seawood, Aureate Media Corporation
System Administrator 8777 Purdue Rd Ste 225
(317) 802-5100 Indianapolis, IN 46268
|