[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Source-based routing and pf
Guillaume Tournat wrote:
> I've got a problem configuring pf to do what i want.
> I have an openbsd-box that acts as a firewall-nat and
> a dsl link to the internet. It works well.
> But for bandwidth reason, I want to add another dsl link,
> with another ip, and do some dns round-robin on the names.
> But the trafic that comes from router 2 doesn't go back
> through it, but through the default gw which is router 1.
> And it fails, because router 1 blocks trafic which not entered
> by it.
> So, I'd like to tell pf to route return packets that entered
> through router 2 to go back by router 2.
> A little draw ;)
> router1 router2
> o o
> | |
> |---| switch |---|
> | switch |
> | | | |
> WWW FTP SMTP POP
> If you understand the upside-down description of my problem,
> thanks for help ;o)
"reply-to" is your friend here.
If possible, you should get another NIC, so each upstream router
enter from a different interface, which would make deciding from
which router the packet comes easy (and maybee save a switch)
Otherwise, maybee it is possible to tag incoming packets based
on their MAC address, not sure exactly how.