[LARTC] UDP port 1194 marking/routing problem

[Remus]

Hi folks,

I have OpenVPN (respect for it developers) running on my FW.
Is has two external NICs and on internal everything is fine, except
I want OpenVPN (UDP port 1194) going not via default route/network interface.

I use such commands:

iptables -t mangle -D POSTROUTING -o eth0 -p udp --dport 1194 -j MARK --set-mark 0x990                                             
ip rule add fwmark 0x990 table openvpn1                                                                                           
ip route add default via $P2 dev eth0 table openvpn1 

eth0 is FW's not default external NIC.

I have in use very similar iptables rules for my email server (TCP ports) and etc.
Everything works fine. 
What I'm doing wrong with marking/routing the UDP port?

Regards

Remus

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ds9a.nl/pipermail/lartc/attachments/20050406/7521f211/attachment.htm