Hi all,
currently I’m identifying P2P by means of mangle on all other type of traffic (ports < 1024), that is mangle as “known”. All other type of traffic is mangled unknown (with both connection and packet mark) and routed on default gateway. I would like to add also a “unknown” mark routing to this type of traffic, so I can route it to other routers different from default gateway:
Yes,
but there are many other ports needed (msn video, custom VPN, …).
Actually the system is working pretty good: all P2P is routed to default gateway where it is queued and all other traffic (known) is directed to other connections. The only problem I have is that I’m not able to apply a mark routing to unknown traffic (p2p) and route this to a dedicated route (not default gateway).
Yes, this is a problem. It’s been written about here in forum, and the only thing one can do for p2p to keep working is NOT to mark routing - just leave it to “go” thru your DEFAULT gateway…
So, lets say, you have two links, “main” link that you pay for really much and “aux” (some adsl line) that is cheap(er).. Make ADSL default gateway, and then mark route all other (important) trafic thru the MAIN link… I’ve been doing that last night - it works … still have some ports to “catch” so voice, video and some other stuff go thru “main” link too
HI jdejansb,
it seems that I’ve solve the problem, may be this might be useful to others…
I’ve simply applied a mark routing (unknown) to all unknown traffic, as described in my post. The mikstake was that mark routing needs IP address to work, so I’ve done an address list (PPPoE users) where are stored all subnets that I use for customers and apply a mark routing to all unknown traffic (mark connection != known) whose source IP address belongs to address list “PPPoE users”.
Now it works, so I can use a gateway for p2p traffic different from Default Gateway
I’m starting to think that I’m stupido When I do as you suggested, p2p traffic really does not go thru default gateway … but, also, it goes nowhere (not working)…
What am I missing? Does address have to be in a address list or could I just put 10.10.0.0/16 ?? (pppoe users get 10.10.10.xxx, 11.xxx, 12.xxx and 14.xxx)??
If your PPPoE address are
10.10.0.0/16
10.11.0.0/16
10.12.0.0/16
10.14.0.0/16
then you need to add all the above networks into PPPoE address list or the whole subnet 10.0.0.0/8. Did you remove the “Passthrough” from mark routing mangle?
Try with a single IP as test (e.g. the one on your PC) and check if mangle rule is matched:
… I had some problems with WiFi - didn’t have time for p2p But, I’ll try in next few days to make it work … (I have to mark ALL the “stuff” that my clients use before sending “!known” to non-default gateway )
Nevertheless - I MANGLEd almost all known nonp2p traffic and ACCEPTed it (when someone complains I look for ports his app. is using and add it to mangle/accept), and whatever left I MARKed connection, packet, and MARKed ROUTING …
p2p goes thru cheep line, and the rest of trafic is on my primary line
, etc…)
(not working)…
But, I’ll try in next few days to make it work … (I have to mark ALL the “stuff” that my clients use before sending “!known” to non-default gateway 