马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。
您需要 登录 才可以下载或查看,没有账号?注册
×
ros2.9.27
[admin@BIGBLACK] ip firewall mangle> pr
Flags: X - disabled, I - invalid, D - dynamic
0 chain=prerouting src-address=192.9.200.5
action=mark-routing new-routing-mark=cnc
passthrough=yes
1 chain=prerouting src-address=192.9.200.158
routing-mark=tel2 action=mark-routing
new-routing-mark=tel2 passthrough=yes
2 chain=prerouting src-address=192.9.200.126
routing-mark=tel2 action=mark-routing
new-routing-mark=cnc passthrough=yes
3 chain=prerouting src-address=192.9.200.6
action=mark-routing new-routing-mark=cnc passthrough=no
[admin@BIGBLACK] ip firewall mangle>
C - connect, S - static, r - rip, b - bgp, o - ospf
0 ADC dst-address=58.49.xxx.xxx/29 pref-src=58.49.xxx.xxx
interface=3com/tel1/3 scope=10 target-scope=0
1 ADC dst-address=192.9.200.0/24 pref-src=192.9.200.1
interface=intel/IN/4 scope=10 target-scope=0
2 ADC dst-address=192.168.1.0/24 pref-src=192.168.1.145
interface=intel/tel2/1 scope=10 target-scope=0
3 X S dst-address=202.103.24.68/32 gateway=192.168.1.1
interface=intel/tel2/1 gateway-state=reachable
scope=255 target-scope=10
4 X S dst-address=210.0.0.0/8 gateway=218.106.117.129
interface=intel/cnc/2 gateway-state=reachable
scope=255 target-scope=10
5 ADC dst-address=218.106.xxx.xxx/29 pref-src=218.106.xxx.xxx
interface=intel/cnc/2 scope=10 target-scope=0
6 A S dst-address=0.0.0.0/0 gateway=58.49.xxx.xxx
interface=3com/tel1/3 gateway-state=reachable
scope=255 target-scope=10
7 A S dst-address=0.0.0.0/0 gateway=192.168.1.1
interface=intel/tel2/1 gateway-state=reachable
scope=255 target-scope=10 routing-mark=tel2
8 A S dst-address=0.0.0.0/0 gateway=218.106.xxx.xxx
interface=intel/cnc/2 gateway-state=reachable
scope=255 target-scope=10 routing-mark=cnc
.5,.6,.158还是走main表,另外两块卡基本没流量
如何解决? |