19864 2003-04-23 22:18 0000 Specific gateway entry for a interface and other things 2005-01-16 14:26:23 0000 1 1 1 Unclassified Gentoo Linux baselayout unspecified All Linux RESOLVED FIXED P2 normal Future 1 steeeeeveee@gmx.net base-system@gentoo.org pfeifer@gentoo.org wmertens@gentoo.org steeeeeveee@gmx.net 2003-04-23 22:18:42 0000 I have a gentoo box wich has 2 NIC's. One is used for the internal network and the other is used for the internet. The one for the internet is directly connected to a SDSL router and can be addressed directly from the web. My problem is that I can not reach the public available address, because the system is trying to route back over the default route and this default route is only used for the internal network and is connected to another linux box wich will route all packages not beloning to local, to a cable modem. The setup looks like this: iface: eth0 description: local area network address: 192.168.0.115 default gateway: 192.168.0.254 (routed to the internet over a cable modem) iface: eth1 description: public internet address address: 195.xxx.xxx.147 default gateway: 195.xxx.xxx.145 (SDSL modem connected to ISP) the output of route -n looks like this: Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 195.xxx.xxx.144 0.0.0.0 255.255.255.248 U 0 0 0 eth1 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 0.0.0.0 192.168.0.254 0.0.0.0 UG 1 0 0 eth0 that way, every communication from that computer to the internet goes over 192. 168.0.254 (wich is okay). but as soon as I connect from external to the 195.xxx.xxx.147 address, I get a timeout. what would solve my problem would be 2 diffrend gateways for each interface! Something like this: Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 195.xxx.xxx.144 0.0.0.0 255.255.255.248 U 0 0 0 eth1 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 0.0.0.0 195.xxx.xxx.145 0.0.0.0 UG 1 0 0 eth1 0.0.0.0 192.168.0.254 0.0.0.0 UG 1 0 0 eth0 The problem is, that the gentoo net.ethX scripts and the rc.conf file do not allow/handle that. What I did to overcome that problem was, that I edited the net.ethX script and changed the way the gateway entry is handled in net.ethX: ## take care of multi gateway entries separated by space ## syntax: gateway="iface1/gw-address1 iface2/gw-address2 iface3/gw-address3" for gateway_entry in ${gateway} do if [ -n "${gateway_entry}" ] && [ "${gateway_entry%/*}" = "${IFACE}" ] then ebegin " Setting default gateway" /sbin/route add default gw ${gateway_entry#*/} dev ${gateway_entry%/*} \ netmask 0.0.0.0 metric 1 >/dev/null || { local error=$? ifconfig ${IFACE} down &>/dev/null eend ${error} "Failed to bring ${IFACE} up" stop return ${error} } eend 0 fi done The change is not very big and does not disturb normal operation. And the only thing needed to be changed are the net.ethX scripts and the description in the rc.conf file to reflect the new syntax. With that technique, my eth0 device is still used to connect to the local network and to the internet (over the cable modem sitting at 192.168.0.254 and acting as a NAT router to the internet) but when a connection comes from the eth1 (195.xxx.xxx.147) interface all trafic goes over that interface back. I know, that the same effect can be done with iptables/ipchains, but I don't see a real reason for using iptables/ipchains, when it can be easy done by adding a additional gateway entry. What do you think about it? Is this something wich can be implemented into gentoo or do I have a to special setup and something like this could not help others? Reproducible: Always Steps to Reproduce: 1. 2. 3. steeeeeveee@gmx.net 2003-04-23 22:23:12 0000 Created an attachment (id=11061) New net.ethX init script stefan.huszics@gmail.com 2003-04-24 10:11:15 0000 I agree that this or something like it should really be added to Gentoo. I've just been trying to fix a problem with one of my NICs for several hours, when the problem is due to this "error" in the scripts. Background: I have a MB with 2 built in NICs (Asus A7N8X-Delux) which are BOTH connected to the same ISP and also to the same Gateway. However with the current implementation with not allowing more then 1 NIC to be linked to the GW doing something like this ping -I eth0 Gateway ping -I eth1 Gateway will make 1 of the NICs fail. Of cource with /sbin/route add -net default gw GW netmask 0.0.0.0 metric 1 eth0 /sbin/route add -net default gw GW netmask 0.0.0.0 metric 1 eth1 everything works as it should. It is really silly to leave this out of the default scripts and makes n00bs like me pull their hair out in frustration trying to work out "why my NIC isn't working". Sure, I've learnt alot during all the reading I did trying to figure out the problem, but I would have been much more happy with a "it just works" from start. ;) azarah@gentoo.org 2003-04-27 07:14:09 0000 Yep. Like I told Steve in a private mail, we need to revamp the network stuff badly, so this will get in after the initial rewrite is done. I am not sure on an eta currently. wmertens@gentoo.org 2003-05-06 08:37:47 0000 I'll try to work on gentoo-net. Looks like this is for a "I have a static network" component, and it should be flexible enough to handle multiple gateways. steeeeeveee@gmx.net 2003-05-06 17:33:55 0000 Wout Mertens: what do you mean? is you comment a positive one or are you making a joke out of my request/post? (sorry if i don't get it right. english is not my native language). if your post is a positive one and you need help or anything i can do to make the network stuff in gentoo better, let me know. i would be happy to help you, wherever i can. cheers SteveB wmertens@gentoo.org 2003-05-06 18:08:19 0000 I am sorry, I was mostly talking to Martin and myself, it was positive :) What I meant was: - We are currently considering changes to the initscripts that make them better at networks. - A proposal of mine was to make a few changes that I think are good, and put them in a separate package, gentoo-net. That way, it could be used if you want to try it - gentoo-net does not exist yet, we're still thinking about what has to go in there - your bug is an example of what has to go in there. Actually, I think that your patch would be useful in the current code, since it doesn't change anything for people that don't have it, and it seems to be useful for other people as well. Martin, what do you think? steeeeeveee@gmx.net 2003-05-24 22:22:11 0000 How far are you with the gentoo-net stuff? I ask this, because I have again another problem with the networking stuff in gentoo wich I can not solve with the normal net.ethX startup script. The problem is, that I want to have static routes, depending on the interface. To solve my problem, I have once again modified the /etc/conf.d/net and /etc/init.d/net.ethX files: in /etc/conf.d/net add static routes, depending on the interface, comma separated (if you have more then 1 static route) in the following way: # This is basically the route argument without the route .... dev $iface static_routes_eth0="net 192.168.0.253 netmask 255.255.255.255 gw 192.168.0.252" in /etc/init.d/net.ethX add to the start part of the script the following: # Add interface-specific static-routes if [ -n "$(eval echo \$\{static_routes_${IFACE}\})" ] then ebegin " Setting static routes for ${IFACE}" echo "$(eval echo \$\{static_routes_${IFACE}\} | tr ',' '\n' | sed 's/^ //')" | while read args ; do ebegin " ${args}" /sbin/route add -${args} dev ${IFACE} >/dev/null 2>&1 && eend 0 || { local error=$? eend ${error} "Failed to set static route" } done eend 0 fi in /etc/init.d/net.ethX add to the stop part of the script the following: # Remove interface-specific static-routes if [ -n "$(eval echo \$\{static_routes_${IFACE}\})" ] then ebegin " Removing static routes for ${IFACE}" echo "$(eval echo \$\{static_routes_${IFACE}\} | tr ',' '\n' | sed 's/^ //')" | while read args ; do ebegin " ${args}" /sbin/route del -${args} dev ${IFACE} >/dev/null 2>&1 && eend 0 || { local error=$? eend ${error} "Failed to remove static route" } done eend 0 fi This script/approach does not take care of dynamic assigned addresses. If for example you need to have a static route, to go over a dhcp assigned address, then you are not able to set it the way I did it. Maybe I will take the time to make that as well possible. But for now I will not invest time in that, since you are anyway doing something better. cheers SteveB robbat2@gentoo.org 2005-01-16 14:26:23 0000 This appears to have been in base-layout for a long time now, so I'm closing it as an old bug. 11061 2003-04-23 22:23 0000 New net.ethX init script net.eth0 text/plain IyEvc2Jpbi9ydW5zY3JpcHQKIyBDb3B5cmlnaHQgMTk5OS0yMDAyIEdlbnRvbyBUZWNobm9sb2dp ZXMsIEluYy4KIyBEaXN0cmlidXRlZCB1bmRlciB0aGUgdGVybXMgb2YgdGhlIEdOVSBHZW5lcmFs IFB1YmxpYyBMaWNlbnNlIHYyCiMgJEhlYWRlcjogL2hvbWUvY3Zzcm9vdC9nZW50b28tc3JjL3Jj LXNjcmlwdHMvaW5pdC5kL25ldC5ldGgwLHYgMS4yMyAyMDAyLzExLzI2IDEyOjMyOjI4IGF6YXJh aCBFeHAgJAoKI05COiBDb25maWcgaXMgaW4gL2V0Yy9jb25mLmQvbmV0CgoKIyBGb3IgcGNtY2lh IHVzZXJzLiBub3RlIHRoYXQgcGNtY2lhIG11c3QgYmUgYWRkZWQgdG8gdGhlIHNhbWUKIyBydW5s ZXZlbCBhcyB0aGUgbmV0Liogc2NyaXB0IHRoYXQgbmVlZHMgaXQuCmRlcGVuZCgpIHsKCXVzZSBw Y21jaWEKfQoKY2hlY2tjb25maWcoKSB7CglpZiBbIC16ICIkKGV2YWwgZWNobyBcJFx7aWZhY2Vf JHtJRkFDRX1cfSkiIF0KCXRoZW4KCQllZXJyb3IgIlBsZWFzZSBtYWtlIHN1cmUgdGhhdCAvZXRj L2NvbmYuZC9uZXQgaGFzIFwkaWZhY2VfJElGQUNFIHNldCIKCQlyZXR1cm4gMQoJZmkKfQoKc3Rh cnQoKSB7CgljaGVja2NvbmZpZyB8fCByZXR1cm4gMQoJbG9jYWwgaWZhY2VfYXJncz0iJChldmFs IGVjaG8gXCRce2lmYWNlXyR7SUZBQ0V9XH0pIgoJbG9jYWwgZGhjcF9hcmdzPSIkKGV2YWwgZWNo byBcJFx7ZGhjcGNkXyR7SUZBQ0V9XH0pIgoJbG9jYWwgcmV0dmFsPTAKCWViZWdpbiAiQnJpbmdp bmcgJHtJRkFDRX0gdXAiCglpZiBbICIkKGV2YWwgZWNobyBcJFx7aWZhY2VfJHtJRkFDRX1cfSki ICE9ICJkaGNwIiBdCgl0aGVuCgkJL3NiaW4vaWZjb25maWcgJHtJRkFDRX0gJHtpZmFjZV9hcmdz fSA+L2Rldi9udWxsIHx8IHsKCQkJcmV0dmFsPSQ/CgkJCWVlbmQgJHtyZXR2YWx9ICJGYWlsZWQg dG8gYnJpbmcgJHtJRkFDRX0gdXAiCgkJCXJldHVybiAke3JldHZhbH0KCQl9CgkJIyBpZmNvbmZp ZyBkbyBub3QgYWx3YXlzIHJldHVybiBmYWlsdXJlIC4uCgkJL3NiaW4vaWZjb25maWcgJHtJRkFD RX0gJj4gL2Rldi9udWxsIHx8IHsKCQkJcmV0dmFsPSQ/CgkJCWVlbmQgJHtyZXR2YWx9ICJGYWls ZWQgdG8gYnJpbmcgJHtJRkFDRX0gdXAiCgkJCXJldHVybiAke3JldHZhbH0KCQl9CgllbHNlCgkJ L3NiaW4vZGhjcGNkICR7ZGhjcF9hcmdzfSAke0lGQUNFfSA+L2Rldi9udWxsIHx8IHsKCQkJcmV0 dmFsPSQ/CgkJCWVlbmQgJHtyZXR2YWx9ICJGYWlsZWQgdG8gYnJpbmcgJHtJRkFDRX0gdXAiCgkJ CXJldHVybiAke3JldHZhbH0KCQl9CglmaQoJZWVuZCAwCgoJaWYgWyAtbiAiJChldmFsIGVjaG8g XCRce2FsaWFzXyR7SUZBQ0V9XH0pIiBdCgl0aGVuCgkJbG9jYWwgeD0iIgoJCWxvY2FsIG51bT0w CgkJbG9jYWwgYWxpYXNiY2FzdD0iIgoJCWxvY2FsIGFsaWFzbm1hc2s9IiIKCgkJZWJlZ2luICIg IEFkZGluZyBhbGlhc2VzIgoJCWZvciB4IGluICQoZXZhbCBlY2hvIFwkXHthbGlhc18ke0lGQUNF fVx9KQoJCWRvCgkJCWFsaWFzYmNhc3Q9IiQoZXZhbCBlY2hvIFwkXHticm9hZGNhc3RfJHtJRkFD RX1cfSBcfCBhd2sgXCdceyBwcmludCBcJCQoKG51bSArIDEpKSBcfVwnKSIKCQkJaWYgWyAtbiAi JHthbGlhc2JjYXN0fSIgXQoJCQl0aGVuCgkJCQlhbGlhc2JjYXN0PSJicm9hZGNhc3QgJHthbGlh c2JjYXN0fSIKCQkJZmkKCgkJCWFsaWFzbm1hc2s9IiQoZXZhbCBlY2hvIFwkXHtuZXRtYXNrXyR7 SUZBQ0V9XH0gXHwgYXdrIFwnXHsgcHJpbnQgXCQkKChudW0gKyAxKSkgXH1cJykiCgkJCWlmIFsg LW4gIiR7YWxpYXNubWFza30iIF0KCQkJdGhlbgoJCQkJYWxpYXNubWFzaz0ibmV0bWFzayAke2Fs aWFzbm1hc2t9IgoJCQlmaQoJCQoJCQllYmVnaW4gIiAgICAke0lGQUNFfToke251bX0iCgkJCS9z YmluL2lmY29uZmlnICR7SUZBQ0V9OiR7bnVtfSAke3h9IFwKCQkJCSR7YWxpYXNiY2FzdH0gJHth bGlhc25tYXNrfSA+L2Rldi9udWxsCgkJCW51bT0kKChudW0gKyAxKSkKCQkJZWVuZCAwCgkJZG9u ZQoJCXNhdmVfb3B0aW9ucyAiYWxpYXMiICIkKGV2YWwgZWNobyBcJFx7YWxpYXNfJHtJRkFDRX1c fSkiCglmaQoKCWlmIFsgLW4gIiQoZXZhbCBlY2hvIFwkXHtpbmV0Nl8ke0lGQUNFfVx9KSIgXQoJ dGhlbgoJCWxvY2FsIHg9IiIKCQllYmVnaW4gIiAgQWRkaW5nIGluZXQ2IGFkZHJlc3NlcyIKCQlm b3IgeCBpbiAkKGV2YWwgZWNobyBcJFx7aW5ldDZfJHtJRkFDRX1cfSkKCQlkbwoJCQllYmVnaW4g IiAgICAke0lGQUNFfSBpbmV0NiBhZGQgJHt4fSIKCQkJL3NiaW4vaWZjb25maWcgJHtJRkFDRX0g aW5ldDYgYWRkICR7eH0gPi9kZXYvbnVsbAoJCQllZW5kIDAKCQlkb25lCgkJc2F2ZV9vcHRpb25z ICJpbmV0NiIgIiQoZXZhbCBlY2hvIFwkXHtpbmV0Nl8ke0lGQUNFfVx9KSIKCWZpCgoJIyMgdGFr ZSBjYXJlIG9mIG11bHRpIGdhdGV3YXkgZW50cmllcyBzZXBhcmF0ZWQgYnkgc3BhY2UKCSMjIHN5 bnRheDogZ2F0ZXdheT0iaWZhY2UxL2d3LWFkZHJlc3MxIGlmYWNlMi9ndy1hZGRyZXNzMiBpZmFj ZTMvZ3ctYWRkcmVzczMiCglmb3IgZ2F0ZXdheV9lbnRyeSBpbiAke2dhdGV3YXl9CglkbwoJCWlm IFsgLW4gIiR7Z2F0ZXdheV9lbnRyeX0iIF0gJiYgWyAiJHtnYXRld2F5X2VudHJ5JS8qfSIgPSAi JHtJRkFDRX0iIF0KCQl0aGVuCgkJCWViZWdpbiAiICBTZXR0aW5nIGRlZmF1bHQgZ2F0ZXdheSIK CQkJL3NiaW4vcm91dGUgYWRkIGRlZmF1bHQgZ3cgJHtnYXRld2F5X2VudHJ5IyovfSBkZXYgJHtn YXRld2F5X2VudHJ5JS8qfSBcCgkJCQluZXRtYXNrIDAuMC4wLjAgbWV0cmljIDEgPi9kZXYvbnVs bCB8fCB7CgkJCQkKCQkJCWxvY2FsIGVycm9yPSQ/CgkJCQlpZmNvbmZpZyAke0lGQUNFfSBkb3du ICY+L2Rldi9udWxsCgkJCQllZW5kICR7ZXJyb3J9ICJGYWlsZWQgdG8gYnJpbmcgJHtJRkFDRX0g dXAiCgkJCQlzdG9wCgkJCQlyZXR1cm4gJHtlcnJvcn0KCQkJfQoJCQllZW5kIDAKCQlmaQoJZG9u ZQoKCgkjIEVuYWJsaW5nIHJwX2ZpbHRlciBjYXVzZXMgd2Fja3kgcGFja2V0cyB0byBiZSBhdXRv LWRyb3BwZWQgYnkKCSMgdGhlIGtlcm5lbAoJaWYgWyAtZSAvcHJvYy9zeXMvbmV0L2lwdjQvY29u Zi8ke0lGQUNFfS9ycF9maWx0ZXIgXQoJdGhlbgoJCWVjaG8gMSA+IC9wcm9jL3N5cy9uZXQvaXB2 NC9jb25mLyR7SUZBQ0V9L3JwX2ZpbHRlcgoJZmkKfQoKc3RvcCgpIHsKCWxvY2FsIG15YWxpYXM9 IiQoZ2V0X29wdGlvbnMgYWxpYXMpIgoJZWJlZ2luICJCcmluZ2luZyAke0lGQUNFfSBkb3duIgoK CSMgQWxzbyBkb3duIHRoZSBpbmV0NiBpbnRlcmZhY2VzCglsb2NhbCBteWluZXQ2PSIkKGdldF9v cHRpb25zIGluZXQ2KSIKCWlmIFsgLW4gIiR7bXlpbmV0Nn0iIF0KCXRoZW4KCQlsb2NhbCB4PSIi CgkJZm9yIHggaW4gJHtteWluZXQ2fQoJCWRvCgkJCS9zYmluL2lmY29uZmlnICR7SUZBQ0V9IGlu ZXQ2IGRlbCAke3h9ID4vZGV2L251bGwKCQlkb25lCglmaQoJCgkjIERvIHNvbWUgY2xlYW51cCBp biBjYXNlIHRoZSBhbW91bnQgb2YgYWxpYXNlcyBjaGFuZ2UKCWlmIFsgLW4gIiR7bXlhbGlhc30i IF0KCXRoZW4KCQlsb2NhbCB4PSIiCgkJbG9jYWwgbnVtPTAKCQlmb3IgeCBpbiAke215YWxpYXN9 CgkJZG8KCQkJL3NiaW4vaWZjb25maWcgJHtJRkFDRX06JHtudW19IGRvd24gPi9kZXYvbnVsbAoJ CQludW09JCgobnVtICsgMSkpCgkJZG9uZQoJZmkKCglpZiBbICIkKGV2YWwgZWNobyBcJFx7aWZh Y2VfJHtJRkFDRX1cfSkiID0gImRoY3AiIF0KCXRoZW4KCQkvc2Jpbi9kaGNwY2QgLWsgJHtJRkFD RX0gJj4vZGV2L251bGwKCQoJCSMgR2l2ZSBkaGNwY2QgdGltZSB0byBwcm9wZXJseSBzaHV0ZG93 bgoJCWxvY2FsIGNvdW50PTAKCQllaW5mb24gIiAgV2FpdGluZyBmb3IgZGhjcGNkIHRvIHNodXRk b3duIgoJCXdoaWxlIFsgIiR7Y291bnR9IiAtbHQgNSBdCgkJZG8KCQkJZWNobyAtbiAiLiIKCQkJ c2xlZXAgMQoJCQljb3VudD0kKChjb3VudCArIDEpKQoJCWRvbmUKCQllY2hvICJkb25lIgoJZWxz ZQoJCS9zYmluL2lmY29uZmlnICR7SUZBQ0V9IGRvd24gPi9kZXYvbnVsbAoJZmkKCWVlbmQgMAp9 CgoKIyB2aW06dHM9NAo=