[Users] Re: Re: IPsec packets from VEs sent to wrong interface

Denis V. Lunev den at parallels.com
Tue Jun 24 04:28:10 EDT 2008

On Tue, 2008-06-24 at 09:39 +0200, Marcus Better wrote:
> Hi,
> Denis V. Lunev wrote:
> > I think the problem is in you routing setup.
> I've checked but don't see anything suspicious. The routing setup is very simple. 
> [host:~]# ip route
> dev eth0  scope link  src
> dev venet0  scope link
> x.y.z.0/25 dev eth0  proto kernel  scope link  src x.y.z.w
> dev br0  proto kernel  scope link  src
> default via x.y.z.1 dev eth0
> [host:~]# ip route get
> dev eth0  src
>     cache  expires 21334342sec mtu 1500 advmss 1460 hoplimit 64

you are doing a wrong thing. You should ask
 ip route get ADDRESS from ADDRESS iif STRING
with both from and iif specified to get a clue.


More information about the Users mailing list