my bad. last commit I changed the conntrack module name to uppercase which caused the snat rules to not match the iptables module and therefore fail on load. this should fix the problem, tested icmp with standard configuration and default routes, works now.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/lbdecision.cc b/src/lbdecision.cc
index 616f243..9bf56cf 100644
--- a/src/lbdecision.cc
+++ b/src/lbdecision.cc
@@ -144,7 +144,7 @@ if so then this stuff goes here!
     sprintf(hex_buf,"%X",ct);
     execute(string("ip rule add fwmark ") + hex_buf + " table " + buf, stdout);
     
-    execute(string("iptables -t nat -A WANLOADBALANCE -m CONNMARK --mark ") + buf + " -j SNAT --to-source " + fetch_iface_addr(iface), stdout);
+    execute(string("iptables -t nat -A WANLOADBALANCE -m connmark --mark ") + buf + " -j SNAT --to-source " + fetch_iface_addr(iface), stdout);
 
     ++ct;
     ++iter;