Re: OpenVPN and policy routing

2017-03-30 Thread Victor Sudakov
Michael Sierchio wrote: > I use different FIBs in the ipfw ruleset to accomplish policy based > routing, including via a tun interface. I've just found out that even when tun0 is in fib 0, you can use it as a gateway from a different fib, and it works: root@km:~ # netstat -rn -4 -F1 Routing table

Re: OpenVPN and policy routing

2017-03-30 Thread Michael Sierchio
I use different FIBs in the ipfw ruleset to accomplish policy based routing, including via a tun interface. - M On Thu, Mar 30, 2017 at 9:24 AM, Andrea Venturoli wrote: > On 03/30/17 09:46, Victor Sudakov wrote: > > Will "ipfw fwd" do the trick? I could "ipfw fwd" the packets into the >> tun0 i

Re: OpenVPN and policy routing

2017-03-30 Thread Andrea Venturoli
On 03/30/17 09:46, Victor Sudakov wrote: Will "ipfw fwd" do the trick? I could "ipfw fwd" the packets into the tun0 interface, but will OpenVPN understand that? Never tried this, sorry. bye av. ___ freebsd-net@freebsd.org mailing list https

Re: OpenVPN and policy routing

2017-03-30 Thread Victor Sudakov
Andrea Venturoli wrote: > > > > Anyone experienced with OpenVPN on FreeBSD? > > > > What would be the best way to policy route a network into OpenVPN? A > > routing decision must be based on the src IP address, not the dst IP > > address. > > > > Imagine an OpenVPN client with 3 interfaces: fxp0

Re: OpenVPN and policy routing

2017-03-30 Thread Andrea Venturoli
On 03/30/17 05:22, Victor Sudakov wrote: Dear Colleagues, Anyone experienced with OpenVPN on FreeBSD? What would be the best way to policy route a network into OpenVPN? A routing decision must be based on the src IP address, not the dst IP address. Imagine an OpenVPN client with 3 interfaces:

OpenVPN and policy routing

2017-03-29 Thread Victor Sudakov
Dear Colleagues, Anyone experienced with OpenVPN on FreeBSD? What would be the best way to policy route a network into OpenVPN? A routing decision must be based on the src IP address, not the dst IP address. Imagine an OpenVPN client with 3 interfaces: fxp0 is the outside interface towards the O