Thread Info
  • State Not Answered
  • Replies 14 replies
  • Subscribers 0 subscribers
  • Views 1960 views
  • Users 0 members are here
Options
Suggested

[7.866][NOTABUG][CLOSED] policy route works even it is disable

utm_kid
Hello Friends !

i create policy route (wordless thanks to billybob)
and  test it it work fine for me and later i tryed to disable it ,still it work (i am able to acess ssh using policy route)later i delete that route then i was not able to acess ssh ,to test further i create new policy route and did not enable it still i was able to acess it for all this process i need not need to restart the system but i restart the linux server and asg many times 


thanks
Parents Reply Children
  • 0 in reply to kbr
    pls check 

     iptables -L POLICY_ROUTING_OUT -v -n -t mangle
    Chain POLICY_ROUTING_OUT (1 references)
     pkts bytes target     prot opt in     out     source               destination                                                                              
    acenn:/home/login # iptables -L POLICY_ROUTING_PRE -v -n -t mangle
    Chain POLICY_ROUTING_PRE (1 references)
     pkts bytes target     prot opt in     out     source               destination                                                                              
    acenn:/home/login # rule was disable still i was able to connect now i will enab
    bash: rule: command not found
    acenn:/home/login # iptables -L POLICY_ROUTING_PRE -v -n -t mangle                                                                                           Chain POLICY_ROUTING_PRE (1 references)
     pkts bytes target     prot opt in     out     source               destination                                                                              
        0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0                                                                                        mark match !0x0
        0     0 MARK       tcp  --  eth0   *       192.168.2.0/24       192.168.1.20                                                                             0       tcp spts:1:65535 dpt:22 mark match 0x0 MARK xset 0x1000000/0xffffffff
    acenn:/home/login # iptables -L POLICY_ROUTING_OUT -v -n -t mangle                                                                                           Chain POLICY_ROUTING_OUT (1 references)
     pkts bytes target     prot opt in     out     source               destination                                                                              
        0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0                                                                                        mark match !0x0
        0     0 MARK       tcp  --  eth0   *       192.168.2.0/24       192.168.1.20                                                                             0       tcp spts:1:65535 dpt:22 mark match 0x0 MARK xset 0x1000000/0xffffffff
    acenn:/home/login #



    thx

    update::i think my plocy rule is wrong
  • 0 in reply to utm_kid
    hi kbr ,

    can u please check this and please let me know whether my policy route is correct or no if possible can u please send me 1 sample of static and policy route with some words 

    thanks
Cookie Information Banner