diff options
| author | Michael Larson <slioch@eng-140.vyatta.com> | 2008-07-01 10:46:20 -0700 |
|---|---|---|
| committer | Michael Larson <slioch@eng-140.vyatta.com> | 2008-07-01 10:46:20 -0700 |
| commit | 28517a30ea745a1544771925b26f635c72054418 (patch) | |
| tree | c9234e020a613da933ecbb9574824e5a0f25e7a8 | |
| parent | b49594b52dd12caa72b868792e949647377361db (diff) | |
| download | vyatta-wanloadbalance-28517a30ea745a1544771925b26f635c72054418.tar.gz vyatta-wanloadbalance-28517a30ea745a1544771925b26f635c72054418.zip | |
fix for bug 3410. added entry for marking of connectionless packets.
| -rw-r--r-- | src/lbdecision.cc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/lbdecision.cc b/src/lbdecision.cc index 56ada69..616f243 100644 --- a/src/lbdecision.cc +++ b/src/lbdecision.cc @@ -130,6 +130,7 @@ if so then this stuff goes here! execute(string("iptables -t mangle -N ISP_") + buf, stdout); execute(string("iptables -t mangle -F ISP_") + buf, stdout); execute(string("iptables -t mangle -A ISP_") + buf + " -j CONNMARK --set-mark " + buf, stdout); + execute(string("iptables -t mangle -A ISP_") + buf + " -j MARK --set-mark " + buf, stdout); //NOTE, WILL NEED A WAY TO CLEAN UP THIS RULE ON RESTART... execute(string("iptables -t mangle -A ISP_") + buf + " -j ACCEPT", stdout); @@ -143,7 +144,7 @@ if so then this stuff goes here! sprintf(hex_buf,"%X",ct); execute(string("ip rule add fwmark ") + hex_buf + " table " + buf, stdout); - execute(string("iptables -t nat -A WANLOADBALANCE -m connmark --mark ") + buf + " -j SNAT --to-source " + fetch_iface_addr(iface), stdout); + execute(string("iptables -t nat -A WANLOADBALANCE -m CONNMARK --mark ") + buf + " -j SNAT --to-source " + fetch_iface_addr(iface), stdout); ++ct; ++iter; |