Policy routing using marks
hey all,
im trying to get routing to different gateways set up using the MARK function of iptables.
the mark that im using is a match for the string on the output chain of the mangle table.
iptables -t mangle -A OUTPUT -m string --string "string" -j MARK --set-mark 0x2
i can see traffic hitting this chain, but when it gets down to the routing, the page is not loaded.
# ip rule add fwmark 0x2 table 200
# ip route add default via GA.TE.WA.Y table 200
my assumption is that packets that are marked will end up going thru the GATEWAY right?
but what i notice is a few packets hitting GATEWAY and the rest go to my default route.
the overall result is my page is not being loaded.
Help appreciated.
|