Hello James,

It's still a little unclear to me how you want traffic to flow in this
environment (in particular how the user traffic is arriving on the box),
but it'll probably be easier if you can have each class of user using a
different subnet. Regardless, it appears that you've set the default route
of each FIB to be the address of the interface you want each FIB to use,
which isn't going to work - your default gateway generally isn't yourself.

It appears that all of your traffic should be using the same default
gateway, and you're only interested in ensuring the egress interface/IP of
the traffic. You *may* not even need multiple FIBs, but instead just
multiple instances of SSHD set to listen to specific addresses (emphasis on
may - you might instead need separate FIB, though each one would still have
the same default gateway set).

Regards,
Mike
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"

Reply via email to