{"id":23,"date":"2003-09-27T16:08:39","date_gmt":"2003-09-27T16:08:39","guid":{"rendered":"https:\/\/143-42-55-146.ip.linodeusercontent.com\/?p=23"},"modified":"2003-09-27T16:08:39","modified_gmt":"2003-09-27T16:08:39","slug":"source-routing","status":"publish","type":"post","link":"https:\/\/nax.cz\/?p=23","title":{"rendered":"SOURCE ROUTING"},"content":{"rendered":"<p>Dnes jsem se konecne dostal k source routingu. Nejdriv jsem dostal po icq radu od LOC:<\/p>\n<p>&#8212;<br \/>\n>><strong> LOC  So z\u0102\u0104\u0139\u0099 27 13:04:32 2003<\/strong><br \/>\nnejdriv do souboru \/etc\/iproute2\/rt_tables pridas radek<br \/>\n&#8222;100       nax&#8220; <\/p>\n<p>a pak source routing zprovoznis pomoci tehle sekvence prikazu. <\/p>\n<p>ip rule add fwmark 1 table nax<br \/>\nip route add default via (default route to czfree) dev wlanX metric 500 table nax<br \/>\nip route add default via (route to mistral) dev eth0 <\/p>\n<p>iptables -A PREROUTING -i wlanY -t mangle -j MARK &#8211;set-mark 1<br \/>\n#pokud nechces delat zalozni iGW, pridej jeste radek<br \/>\niptables -A PREROUTING -i wlanX ! -d 10.0.0.0\/8 -t mangle -j DROP <\/p>\n<p>wlanY je lokalni pokryti, wlanX je spoj s dalsim AP, eth0 je k tobe do vnitrni site. Snad to bude fachat.<br \/>\n&#8212;<\/p>\n<p>Jenze zacaly drsny problemy. Jen jsem tam dal tu routu tak se prestal ozyvat. Ruznymi pokusy jsem zjistil, ze to hned od zacatku zacne tu tabulku brat jako smerodatnou. No nakonec jsem to vyresil pridanim radku kde explicitne rikam default routu pro vnitrni rozsah site a bylo vymalovano. Jenze pak zase nechodily routy do czfreeho \ud83d\ude41<\/p>\n<p># Smazne vsechno v tabulce upc<br \/>\nip route flush table upc<br \/>\n# na pevno routu do vnitrni site aby to pripadne nespadlo<br \/>\nip route add 10.27.72.0\/24 dev eth0 table upc<br \/>\n# default routa s nizkou prioritou do czfreeho<br \/>\nip route add default via 10.27.4.120 dev wlan1 metric 500 table upc<br \/>\n# pridani routy na muj server<br \/>\nip route add default via 10.27.72.1 dev eth0 table upc<br \/>\n# upraveni default routy<br \/>\nip route chg default via 10.27.72.1 dev eth0 table upc src 10.27.72.7<\/p>\n<p>Nicmene kdyz jsem pak nakonec po kompilaci jadra s s podporou flagu dal:<br \/>\nnaxrouter:~# iptables -A PREROUTING -i wlan0 -t mangle -j MARK &#8211;set-mark 1<br \/>\niptables v1.2.6a: can&#8217;t initialize iptables table `mangle&#8216;: Table does not exist (do you need to insmod?)<br \/>\nPerhaps iptables or your kernel needs to be upgraded.<\/p>\n<p>Moc hezky, co rikate? Na tohle jsme nakonec nasel lek v podobe grepu Documentation adresare ze zdrojaku kernelu a zjistil jsem ze jsem nezaskrtl Packet mangle optionu v IP filteru. No a dal jsem rekompilovat jadro <\/p>\n<p>naxrouter:\/usr\/src\/linux# (make dep &#038;&#038; make clean &#038;&#038; make bzImage &#038;&#038; make modules &#038;&#038; make modules_install) &#038;> k.log &#038;<\/p>\n<p>A sel jsem spat.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Dnes jsem se konecne dostal k source routingu. Nejdriv jsem dostal po icq radu od LOC: &#8212; >> LOC So z\u0102\u0104\u0139\u0099 27 13:04:32 2003 nejdriv do souboru \/etc\/iproute2\/rt_tables pridas radek &#8222;100 nax&#8220; a pak source routing zprovoznis pomoci tehle sekvence prikazu. ip rule add fwmark 1 table nax ip route add default via (default route [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-23","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/posts\/23","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=23"}],"version-history":[{"count":0,"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/posts\/23\/revisions"}],"wp:attachment":[{"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=23"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=23"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=23"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}