<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span lang=FR-CA>Hi,<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>Reward offered: 50$ (paypal), and I am sure
this is a ridiculous thing I have missing.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>My goal: On a 2 NIC Asterisk box, to send
packets that came in Asterisk on NIC1 back to NIC 1, and NIC2 back to NIC 2. (basically,
send them back the same way they came from).<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>I have been doing what was recommended to
me and mangling packets left and right. I have reached a point where I am
stuck, and can`t imagine why this last little step isnt working.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>As you know, Asterisk sends all packets
"from" the default IP (in my case, NIC 1 IP). So connections to
NIC 1 work fine, to NIC 2 they don`t. I therefore put in some routing
rules to help me. Some example, a phone (remote PBX setup) coming in from
65.77.77.77 works fine because of these (slightly obfuscated by changing IPs
shown) routing rules:<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>ip rule show: <o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>0: from all
lookup 255<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>32759: from all fwmark 0x64 lookup ISP2
(</span><----- this is key to my issue)<o:p></o:p></p>
<p class=MsoNormal><span lang=FR-CA>32760: from all to 65.77.77.77 lookup
ISP2<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>32766: from all lookup main<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>32767: from all lookup default<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>ip route show table ISP2:<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>default via 22.22.22.22 dev eth1 src 22.22.22.21<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>BUT I can't reliably know where the phones
come from (long story), or what IP they use (ISP1 or ISP2) to connect to me. So
instead, I have done this with iptables:<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>MARK
all --
anywhere
STRING match "22.22.22.21" ALGO name bm TO 65535MARK set 0x64<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>Basically saying to mark all packets that
have the string "22.22.22.21" in it's SIP content (meaning they came
in on NIC2 originally because the phone registered to 22.22.22.21) with mark
0x64. And that works fine, because another rule that LOGs these marked
packets is logging them correctly.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>Because of my above routing rules, packets
going out marked with 0x64 or those going to 65.77.77.77 should go to the same
ip route (route table ISP2). Mysteriously, I see that packets going to
65.77.77.77 (using wireshark) are correctly mangled as coming from 22.22.22.21,
but not those marked with 0x64. Those still go out through the default
routing table.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>What the heck am I missing? I believe I
have done my homework, but there is no more door left to bang my head on.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA>Mike<o:p></o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=FR-CA><o:p> </o:p></span></p>
</div>
</body>
</html>