Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-14 Thread Denis Fondras
Hello, Unfortunately, the pf.conf syntax has changed since v4.6 and while I do plan to upgrade my own firewall to v5.0 (I've bought the CD already) I haven't yet had time to perform the upgrade. As a result, I haven't worked out what the equivalent 'modern' syntax would be, but you might be abl

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-13 Thread Dr.-Ing. Torsten Finke
Dear Ken, On Thu, Jan 12, 2012 at 01:05:10PM -0500, Kenneth Gober wrote: > On Tue, Jan 10, 2012 at 1:41 PM, Dr.-Ing. Torsten Finke < > torsten.fi...@igh-essen.com> wrote: > > > On my firewall I have TWO different internet connections. It is simple to > > forward - for instance ssh - > > from bot

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-12 Thread Kenneth Gober
On Tue, Jan 10, 2012 at 1:41 PM, Dr.-Ing. Torsten Finke < torsten.fi...@igh-essen.com> wrote: > On my firewall I have TWO different internet connections. It is simple to > forward - for instance ssh - > from both connections to an internal machine. Now this machine answers and > the > firewall sen

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-11 Thread Lawrence Teo
m=119446553412564&w=2 > > -Steve S. > > > -Original Message- > > From: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf > > Of Dr.-Ing. Torsten Finke > > Sent: Wednesday, January 11, 2012 10:48 AM > > To: misc@openbsd.org &g

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-11 Thread Steven Surdock
sten Finke > Sent: Wednesday, January 11, 2012 10:48 AM > To: misc@openbsd.org > Subject: Re: Multiple ISP-connections/Routing/Packet filtering > > Hello Russell, > > On Wed, Jan 11, 2012 at 07:46:59AM -0500, Russell Garrison wrote: > > Have you considered routing domains? &

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-11 Thread Dr.-Ing. Torsten Finke
Hello Russell, On Wed, Jan 11, 2012 at 07:46:59AM -0500, Russell Garrison wrote: > Have you considered routing domains? no I have not. According to your hint I started to study their concept, but have not found a description that would meet my situation. Thanks for your idea and best regar

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-10 Thread Dr.-Ing. Torsten Finke
Hello Jorge, > I read again your mail and now i'm lost ! > > You Wrote: > > "How can I force my Extl. FW to reply on exactly the same interface it > > > had been requested on? For example I am running OpenVPN(1194/UDP) > > > between my HomeOffice (Z=Client) and the Intl. FW(=Server). Alike I >

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-10 Thread Jorge Enrique Valbuena Vargas
Hello ! I read again your mail and now i'm lost ! You Wrote: "How can I force my Extl. FW to reply on exactly the same interface it > > had been requested on? For example I am running OpenVPN(1194/UDP) > > between my HomeOffice (Z=Client) and the Intl. FW(=Server). Alike I > > would appretiate

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-10 Thread Dr.-Ing. Torsten Finke
Hello Jorge, > If i understood you well, the answer to your question is here ! > > > http://www.openbsd.org/faq/pf/pools.html > > Under the section Load Balancing outgoing traffic, or take a look at: > > http://www.openbsd.org/faq/faq6.html#Multipath > > > There are good examples there ! >

Re: Multiple ISP-connections/Routing/Packet filtering

2012-01-10 Thread Jorge Enrique Valbuena Vargas
Hello Torsten ! If i understood you well, the answer to your question is here ! http://www.openbsd.org/faq/pf/pools.html Under the section Load Balancing outgoing traffic, or take a look at: http://www.openbsd.org/faq/faq6.html#Multipath There are good examples there ! I hope this can help

Multiple ISP-connections/Routing/Packet filtering

2012-01-10 Thread Dr.-Ing. Torsten Finke
Dear List, Here I show my network topology. Maybe it seems quite typical. My internal network is located behind an Intl/Extl Firewall which is connected to the Internet(IN) via pppoe/ppp(8). On the other side I run different systems, for instance a home office network, a mobile laptop, and severa