Could policy routing with fwmark be applied to locally generated packet ?

[Pascal Hambourg]

Hello,

Sietse van Zanen wrote :
> 
> dog daemon wrote :
>>
>> The question is could we use netfilter fwmark to mark locally generated
>> port 80 packet (http) to certain fwmark(ex. 0x20), and route them to
>> wireless route, but keep the default gw being 10.5.30.254?

Yes, of course.

>> I have tested the following environment but it seemed that the packets
>> was be routed to the correct route, but had the incorrect source
>> address(the address of eth0).
[...]
>> I think that output routing decision was done before "OUTPUT" chain in
>> mangle table, and the outgoing address was already chosen

That's correct.

>> Is there another way to fit this requirement or am i missing
>> something(documentation) ?
> 
> I think you only need to add a simple SNAT rule to change the source IP
> to 192.168.3.10

Yes. Avoid MASQUERADE which does not always work as expected when in 
conjunction with advanced routing.
The mark set for alternate routing can be reused to match the 
connections which need to be SNATed.

> Or there might be some ip_if_group option is /proc/sys/net to have
> local outgoing packets always use the source address of the interface
> the are leaving. Not sure about Linux, but Solaris has such an option in
> the kernel.

IMHO such behaviour would be total nonsense.