Really strange interface behavior

[coderman]

On 2/4/07, Matt Glaves <matt at glaves.org> wrote:
> ...
> Eth0:  New TOR Interface (216.9.65.50).  This was previously a
> subinterface aka eth1:1
> Eth1:  Webserver/Mailserver/etc Interface - This is a separate
> netblock/vlan.  Call it 216.9.100.100 for this example.
> ...
> Although netstat only shows TOR connections on the 216.9.65.50 address
> and zero listening/open connections on 216.9.100.100 (other than the
> listening web/email processes) my traffic is being split between the
> interfaces.

let me guess, eth1 is default route, and if you look at outgoing Tor
packets the source address is correctly "216.9.65.50".

you can maybe fix via iproute2 and policy based routing (may also need
netfilter hooks).

best regards,