Re: [RFC] MASQUERADE / policy routing ("Route send us somewhere else")

[Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>]

Harald Welte <laforge@xxxxxxxxxxxxx> wrote:
> 
> I've seen a number of users commenting out that check or even starting
> to use the iptables ROUTE target (ugly) to get it working in their
> setup.  Or they start to use SNAT with scripts in PPP if-up to update
> the ruleset with the new dynamic IP :(

Yes I had to convert all my MASQUERADE rules over to SNAT due to this
problem.  Unfortunately I had to convert them back again because SNAT
doesn't do an automatic flush which MASQUERADE does.  Without the flush
it's pretty useless when your interface address changes often.

So it would be good to know why the oif key is a bad idea.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt