Claer wrote:
This can be very problematic if your ISPs are running antispoofing
protections (they should, they rarely do). The other problem I see in
that setup is the asymetric routing it creates. It can be another source
of problems later. Please, try to check with a temp server (with one of
your free IP) before putting this configuration in production
environement.
Yes if they are. Sadly many are not. If you were my customer, yes it
wouldn't work, but if you explain what you want to do, then the filter
could be change to allow it, or depending on the connection you have, I
might even setup bgp for you. But again, if you have your server behind
PF and you use PF to NAT it to your internal IP's, then when it come
out, it would use the IP of the connection it comes out on anyway.
So, test before saying it wouldn't work. It's not as uncommon as you think.
Best.
Daniel
