Skip to contentSkip to conversation

vrrp question posted on keepalived.org

DISCUSSION craig e. smith 1 participant 1 message Oct 9, 2002

lore
Share & tools
lore
#0 lore raw

i am also going to post this here, as it may be a vrrp iptables issue:

i am setting up a redundant firewall solution using keepalived(vrrp) and iptables. i use iptables snat to change the source of the traffic from the firewall to the vrrp virtual address:

iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 192.168.208.69

my question, why don't the vrrp advertisements get snat'ed? not that i want them to, i don't. but by not specifying a protocol in the above iptables statement all traffic leaving the box should get snat'ed, right? any help with this is appreciated.