Hello James, It's still a little unclear to me how you want traffic to flow in this environment (in particular how the user traffic is arriving on the box), but it'll probably be easier if you can have each class of user using a different subnet. Regardless, it appears that you've set the default route of each FIB to be the address of the interface you want each FIB to use, which isn't going to work - your default gateway generally isn't yourself.
It appears that all of your traffic should be using the same default gateway, and you're only interested in ensuring the egress interface/IP of the traffic. You *may* not even need multiple FIBs, but instead just multiple instances of SSHD set to listen to specific addresses (emphasis on may - you might instead need separate FIB, though each one would still have the same default gateway set). Regards, Mike _______________________________________________ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"