|
Hi Horms,
On Tue, 11 Jan 2000, Horms wrote:
> On Wed, Jan 12, 2000 at 08:23:29AM +0200, Julian Anastasov wrote:
> >
> > - all/rp_filter=1, eth1/rp_filter=0, eth2/rp_filter=1 - this is for your
> > security only. For the test you can set */rp_filter=0
>
> I have */rp_filter=1.
eth1/rp_filter=1 when all/rp_filter=1 is very good reason that the
packets are not forwarded. The source validation works by checking the
source address and the input interface (eth1 in your case). So, for the
test please set */rp_filter=0 or at least eth1/rp_filter=0, i.e. by this
way we allow packets with saddr=VIP to be forwarded to another device
based on your routing table (eth2).
Regards,
Julian Anastasov
----------------------------------------------------------------------
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
To unsubscribe, e-mail: lvs-users-unsubscribe@xxxxxxxxxxxxxxxxxxxxxx
For additional commands, e-mail: lvs-users-help@xxxxxxxxxxxxxxxxxxxxxx
|
