Re: Special route and NPF

[BERTRAND Joël <joel.bertrand%systella.fr@localhost>]

Robert Swindells a écrit :
> BERTRAND Joël <joel.bertrand%systella.fr@localhost> wrote:
> > I'm using NPF to filter packets and I'm unable to find a solution to a
> > simple problem.
> >
> > Here is my network :
> >
> > eth1(wan1)--+--Linux router-----+---eth0(lan1)
> > eth2(wan2)--+                   +---tap0(lan2)
> >                                 +---tap1(lan3)
> >
> > wm0(wan3) --+--NetBSD router----agr0(lan4)
> > tap0(lan3)--+
>
> I think you are going to have to give some more information about how
> you have connected things up and what routes you have added other than
> default ones.

I only have a default route and some static routes to my differents lan's :

Internet:
Destination        Gateway            Flags    Refs      Use    Mtu 
Interface
default            192.168.15.20      UG       -        -      -  wm0
79.170.216.0/28    192.168.1.1        UG       -        -      -  tap0
91.196.180.225     192.168.1.1        UGH      -        -      -  tap0
127/8              localhost          UGR      -        -  33648  lo0
localhost          localhost          UH       -        -  33648  lo0
192.168.0/24       192.168.1.1        UG       -        -      -  tap0
192.168.1/24       link#7             U        -        -      -  tap0
192.168.1.1        ce:10:2d:04:8d:8a  UHL      -        -      -  tap0
192.168.10/24      link#5             U        -        -      -  agr0
192.168.10.101     link#5             UHL      -        -      -  agr0
192.168.10.102     d8:cb:8a:7d:10:59  UHL      -        -      -  agr0
192.168.10.103     38:2c:4a:70:14:83  UHL      -        -      -  agr0
192.168.10.128     68:05:ca:02:b2:59  UHL      -        -      -  lo0
192.168.10.250     88:75:56:07:d4:08  UHL      -        -      -  agr0
192.168.15/24      link#1             U        -        -      -  wm0
192.168.15.20      dc:9f:db:51:66:c7  UHL      -        -      -  wm0
192.168.253/24     192.168.1.1        UG       -        -      -  tap0
192.168.254/24     192.168.1.1        UG       -        -      -  tap0

79.170.216.0/28 and 91.196.180.225 are addresses used by my SIP provider.

> For example, is your tap0(lan3) connected to a bridge ?

	No, lan3 is an OpenVPN over tap interface. I have found a workaround 
this evening (I have add a source NAT, thus server on lan4 returns IP 
packet to Linux router).

	Regards,

	JB