Hi!
Stuart Henderson wrote:
> On 2010-09-18, Imre Oolberg wrote:
>
>> 3. using route-to ($if_ext $if_ext_gw) construct on the pass out rule i
>> can't change the interface the packet it getting out, its already
>> decided, i can only choose the next hop gateway address with-in the
>> network t
On 2010-09-18, Imre Oolberg wrote:
> 3. using route-to ($if_ext $if_ext_gw) construct on the pass out rule i
> can't change the interface the packet it getting out, its already
> decided, i can only choose the next hop gateway address with-in the
> network the $if_ext is in
not correct, you can
Hi!
I try to describe my understanding out the situation more closely and
hope you can guide me further
1. since packets are generated locally packet filter match them only on
outgoing direction
2. locally generated packets are routed according to the default routing
table
3. using route-to ($if_
On Sat, 18 Sep 2010 20:12:32 +0300
Imre Oolberg wrote:
> Hallo!
>
> I have OpenBSD v. 4.7 i386 firewall with two outgoing internet
> connections (of which one is default gateway and the other could be
> used with route-to, for example) and serveral networks behind it. On
> the firewall runs Squi
4 matches
Mail list logo
