On T 7 Apr, 2009, at 10:37 , Zöld wrote:

Hi all!

I think my problem is solved. As I mentioned earlier the ipfw fwd hasn't got any effect (under FreeBSD 7.1), but pf (packet filter) can forward among the
interfaces too.

Here are the commands:
kldload pf

/etc/pf.conf:
pass out quick route-to (interface1_name gateway1_address) from
interface1_address to any
pass out quick route-to (interface2_name gateway2_address) from
interface2_address to any

pf -e -f /etc/pf.conf

Now the packets leave the computer over the proper interface independent of
the default gateway.

very good! unfortunately pf hasn't been ported to the macosx kernel yet... Just a warning, on MacOS X I had kernel panics, when reloading rules, in some place inherited from BSD (netinet/ip_fw2.c) and I think they were triggered by a fwd to the default gateway. In other words, if a packet does not need to be re-routed (that is it should go to the default gateway), do not use a fwd, make it an allow rule instead (don't know what this is called in pf... pass) as this will have the same net effect. I might be completely wrong about this panic and might not apply to FreeBSD or pf, of course, but still I see no point in routing explicitly what will be routed correctly anyway.

Giuliano_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
To unsubscribe, send any mail to "[email protected]"

Reply via email to