Em 08-12-2013 23:50, dikshie escreveu: > sure, i'll check with tcpdump after working/business hour. -dikshie- You could enforce v4 traffic going through the v4 gateway and v6 traffic going through the v6 gateway, using pf and route-to. This way you can assure that the right protocol is going through the right interface. Do not forget that traffic coming out of the firewall itself is one thing and traffic passing through it is another thing completely different. You have to enforce both.
Cheers, -- Giancarlo Razzolini GPG: 4096R/77B981BC