Tak na to dnes respektive vcera guli vlitnul a tu zebru rozchodil. Prej byl hlavni problem v tom, ze jsem v ospfd.conf mel vsude priority 0 a kuli tomu se moje routy nepropagovali dal. Stacilo to zmenit na 1 a bylo hotovo. No tak lehky to nebylo, ale nakonec jsem vyresil i ten source routing.<\/p>\n
Jen pro pripomenuti – potreboval jsem, aby nektery vyvoleny IP mely pristup pres na internet pres moji pripojku na internet vcetne toho routeru (jinak receno aby meli default routu muj hranicni router do inetu) a ostatni aby meli default routu do czfree.<\/p>\n
naxrouter:\/sbin# cat routy
\n#!\/bin\/bash<\/p>\n
# Pro jistotu
\necho 1 > \/proc\/sys\/net\/ipv4\/conf\/all\/forwarding<\/p>\n
# Packety s MARK 1 pujdou rovnou do main (tam je default routa na muj inet)
\nip rule add fwmark 1 table main<\/p>\n
# Packety s MARK 2 pujdou do tabulky czfree
\nip rule add fwmark 2 table czfree
\n# smaznem routy v tabulce czfree
\nip route flush table czfree
\n# kde je jen jedna default routa na bluehillz (to je moje nova spojovaci adresa)
\nip route add default via 10.27.64.34 dev wlan1 table czfree<\/p>\n
\/sbin\/ipmarks
\nnaxrouter:\/sbin# cat ipmarks
\n#!\/bin\/bash
\n# Smaznem predchozi pravidla
\niptables -t mangle -F
\niptables -A PREROUTING -t mangle -d ! 10.0.0.0\/8 -j MARK –set-mark 2<\/p>\n
echo ‚ Takze abyste tomu rozumeli: Tak na to dnes respektive vcera guli vlitnul a tu zebru rozchodil. Prej byl hlavni problem v tom, ze jsem v ospfd.conf mel vsude priority 0 a kuli tomu se moje routy nepropagovali dal. Stacilo to zmenit na 1 a bylo hotovo. No tak lehky to nebylo, ale nakonec jsem vyresil i ten source routing. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-29","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/posts\/29","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=29"}],"version-history":[{"count":0,"href":"https:\/\/nax.cz\/index.php?rest_route=\/wp\/v2\/posts\/29\/revisions"}],"wp:attachment":[{"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=29"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=29"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nax.cz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=29"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nopen(ADDR,“\/etc\/upc.allow“);
\nwhile ($IP=
\n chomp($IP);
\n system(„iptables -A PREROUTING -s $IP -t mangle -j MARK –set-mark 1“);
\n }
\n‚ | perl<\/p>\n
\no desitkovy adresy se stava plne zebra v tabulce main. Cili pokud packet smeruje do nedesitkovy site, tak se mu nejdriv nastavi MARK na 2 a tedy pujde na bluehillz pokud ovsem je z vyvolenych a smi pouzivat moji inet pripojku, tak se to preznackuje na 1 a tedy stejne projde do main. Jak proste mily watsone.<\/addr><\/p>\n","protected":false},"excerpt":{"rendered":"