iptables/advanced routing

[Elmer Joandi]

------=_?hOe4ym7uCUUmuF/Ihy2ac+g'JRBhu6Lcs6I93'8k6_1+.9Kt((9d7+PLMc6
Content-Type: text/plain; charset=iso-8859-15
Content-Transfer-Encoding: 8bit

2.4.2-ac3
ip rule :  many rules
ip route: several tables
doing nat, tunnels, source address based routing, QoS

Problems:

1. ICMP packets do not pass advanced routing rules and tables, take default 
route and associated outgoing source address from main table.
	1. nat tunnel icmp fragmentation gets correct source address but bad 
	route
	2. non-nat generated icmp gets also source address from main table.
	3. itf main table does not have default, icmp source address decision 
	could go trough rules.

2. iptables does not accept SNAT in PREROUTING  chain. Which makes ip rule 
tables very long, much longer than it could be if source address would be 
changed before routing.

------=_?hOe4ym7uCUUmuF/Ihy2ac+g'JRBhu6Lcs6I93'8k6_1+.9Kt((9d7+PLMc6
Content-Type: application/octet-stream;name=""
Content-Disposition: attachment; filename=""
Content-Transfer-Encoding: base64

DQo=

------=_?hOe4ym7uCUUmuF/Ihy2ac+g'JRBhu6Lcs6I93'8k6_1+.9Kt((9d7+PLMc6--