iptables i MARK

[Hugle]

pret vsem.

hochiu zdelat' routing based on ports..

dla etogo ja pomechaiju paket i probuju ego kidat' na ISP

no vot enpoluchiaetsa..

 

ja delaju tak:

iptables -I PREROUTING -i eth2 -s 192.168.1.83 -t mangle -p tcp --dport 7000 -j MARK --set-mark 7000

echo "201 irc.out" >> /etc/iproute2/rt_tables

ip rule add fwmark 7000 table irc.out

ip route add default via 192.168.254.254 dev eth0 table irc.out

 

mozhet ktoto videt oshibki?

spasibo..