On 1/25/06, Oleg Tarasov <[EMAIL PROTECTED]> wrote: > First three functions would be great to be implemented inside one > daemon like standart natd. Packets should be diverted into it. This > daemon can easily perform all of the tasks listed above as all of the > packets are passed through it. > > Using it in a combination with policy-routing would be a powerful > mechanism!
You may want to check out PF, the packet filter imported from OpenBSD. I have it running on some large routers doing NAT out multiple interfaces, load balancing and policy routing. Careful use of anchors and some scripting (or ifstated which might be in ports) can move traffic off failed links or respond to changing loads. I've done a lot with both ipfw and PF now, and I'm finding PF to be more flexible for my uses. -- Jon Simola Systems Administrator ABC Communications _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"
