MASQUERADE rule does not work with routing table and bridge
Hi,
I have two routing tables: telmex (br3) y bbs (br2); both have your property gateway and i set up the routing rules. I can connect to ip2 and ip3 from internet. And the default gateway in the main routing table is ip2. From te linux router i can output to internet by the gateway ip2, but when i mark certain traffic for outgoing by br3 and masquerade its, not masquerade!!
I know that the traffic output is by eth2 (br3) because i log with ebtables (ebtables -I OUTPUT) but the ip source is ip2.
I disable CONNTRACK for traffic outgoing by br3, but nothing. When i change default gateway in the main routing to ip3, it works fine.
The problem is that the MASQUERADE rule does not work with routing table and bridge.
Any idea?
________
+------------+ /
| | |
+-------------+ Provider 1 +-------
__ |ip2 | | /
___/ \_ +------+-------+ +------------+ |
_/ \__ | br2 | /
/ \ | | |
| Local network -----+ Linux router | | Internet
\_ __/ | | |
\__ __/ | br3 | \
\___/ +------+-------+ +------------+ |
|ip3 | | \
+-------------+ Provider 2 +-------
| | |
+------------+ \________# ip route ls 139.132.201.56/29 dev br2 proto kernel scope link src 139.132.201.58 188.126.250.96/28 dev br3 proto kernel scope link src 188.126.250.98 192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1 192.168.168.0/21 dev br0 proto kernel scope link src 192.168.172.254 192.168.168.0/21 dev br1 proto kernel scope link src 192.168.172.253 default via 139.132.201.62 dev br2
# ip rule ls 0: from all lookup local 32755: from all fwmark 0x5 lookup telmex 32756: from 188.126.250.98 lookup telmex 32757: from 139.132.201.58 lookup bbs 32758: from all fwmark 0x3 lookup bbs 32766: from all lookup main 32767: from all lookup default
# ip route ls table bbs 139.132.201.56/29 dev br2 scope link src 139.132.201.58 default via 139.132.201.62 dev br2
# ip route ls table telmex 188.126.250.96/28 dev br3 scope link src 188.126.250.98 default via 188.126.250.97 dev br3
E.Huerta