InfraRefresh/routing
Jump to navigation
Jump to search
Traffic goes out via UPC unless directed otherwise in the Modify policies.
Routing policy for traffic from Nurdspace network
modify Nurdspace-Client-IN {
rule 1 {
action modify
description restore-mark
modify {
connmark {
restore-mark
}
}
}
rule 4 {
action accept
description "Keep local local"
destination {
group {
network-group RFC1918
}
}
}
rule 5 {
action modify
description "route irc over BIT"
destination {
port 6667,6697
}
modify {
table 2
}
protocol tcp
}
rule 6 {
action modify
description "Spacenet radius"
destination {
address 194.171.96.99
}
modify {
table 2
}
}
rule 8 {
action modify
description "Http/Https over DSL"
destination {
port 80,443
}
modify {
table 2
}
protocol tcp
}
rule 10 {
action modify
description "route traffic from BIT back over BIT"
mark 2
modify {
table 2
}
}
rule 11 {
action modify
description "Outbound email v4"
destination {
port 25
}
modify {
table 2
}
protocol tcp
source {
address 10.208.10.5
}
}
rule 98 {
action modify
description "route over dsl"
disable
modify {
table 2
}
}
rule 99 {
action accept
description "Accept all"
}
}
Bit incomming
rule 16 {
destination {
address 213.154.252.130
port 1812
}
inbound-interface eth2
inside-address {
address 192.168.1.2
}
protocol udp
type destination
}
UPC incomming
rule 1 {
destination {
address 77.251.168.181
port 80
}
inbound-interface eth1
inside-address {
address 10.208.11.6
}
log disable
protocol tcp
type destination
}
rule 2 {
destination {
address 77.251.168.181
port 443
}
inbound-interface eth1
inside-address {
address 10.208.11.6
}
log disable
protocol tcp
type destination
}
rule 6 {
destination {
address 77.251.168.181
port 22
}
inbound-interface eth1
inside-address {
address 10.208.11.2
}
log disable
protocol tcp
type destination
}
rule 9 {
destination {
address 77.251.168.181
port 122
}
inbound-interface eth1
inside-address {
address 10.208.11.250
port 22
}
log disable
protocol tcp
type destination
}
rule 10 {
destination {
address 77.251.168.181
port 60000-60050
}
inbound-interface eth1
inside-address {
address 10.208.11.250
}
log disable
protocol udp
type destination
}
Hairpin natting
rule 7 {
destination {
address 77.251.168.181
port 22
}
inbound-interface eth0
inside-address {
address 10.208.11.2
}
log disable
protocol tcp
type destination
}
rule 3 {
destination {
address 77.251.168.181
port 80
}
inbound-interface eth0
inside-address {
address 10.208.11.6
}
log disable
protocol tcp
type destination
}
rule 4 {
destination {
address 77.251.168.181
port 443
}
inbound-interface eth0
inside-address {
address 10.208.11.6
}
log disable
protocol tcp
type destination
}
rule 5 {
destination {
address 77.251.168.181
port 22
}
inbound-interface eth0
inside-address {
address 10.208.11.2
}
log disable
protocol tcp
type destination
}
BGP
Neighbor V AS MsgRcv MsgSen TblVer InQ OutQ Up/Down State/PfxRcd 10.38.20.5 4 65530 203410 356286 1084 0 0 09w6d23h 5 172.30.0.5 4 64513 349444 349334 1084 0 0 01:58:13 4 2001:470:7894:beef::1 4 64513 349660 349667 1084 0 0 01w0d04h 0
10.38.20.5 == zarya 172.40.0.5 == Techinc 2001:470:7894:beef::1 == Techinc