On 2000-01-12T13:01:37,
Julian Anastasov <uli@xxxxxxxxxxxxxxxxxxxxxx> said:
> eth1/rp_filter=1 when all/rp_filter=1 is very good reason that the
> packets are not forwarded. The source validation works by checking the
> source address and the input interface (eth1 in your case). So, for the
> test please set */rp_filter=0 or at least eth1/rp_filter=0, i.e. by this
> way we allow packets with saddr=VIP to be forwarded to another device
> based on your routing table (eth2).
rp_filter does not control the "drop packets with a src address which is also
a local interface" IIRC.
Sincerely,
Lars Marowsky-Brée
--
Lars Marowsky-Brée
Network Management
teuto.net Netzdienste GmbH
----------------------------------------------------------------------
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
To unsubscribe, e-mail: lvs-users-unsubscribe@xxxxxxxxxxxxxxxxxxxxxx
For additional commands, e-mail: lvs-users-help@xxxxxxxxxxxxxxxxxxxxxx
|