multi gateways setup

hi

scenario:
users---->[lan]freebsdpf[wan]----->{gw1,gw2}
where gw1 goes to isp1, and gw2 goes to isp2.


requirements:
ftp, http, https traffic goes to gw1
telnet, ssh, mail and pop goes to gw2

can freebsdpf do this?
_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

Rosli Sukri wrote:
> hi
>
> scenario:
> users---->[lan]freebsdpf[wan]----->{gw1,gw2}
> where gw1 goes to isp1, and gw2 goes to isp2.
>
>
> requirements:
> ftp, http, https traffic goes to gw1
> telnet, ssh, mail and pop goes to gw2
>
> can freebsdpf do this?
> _______________________________________________
> freebsd-pffreebsd.org mailing list
> 
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"
>   
yes, it can

look for "reply-to" and "route-to"
options in pass rules.

for example:
pass out route-to ($wan_if $gw1)  from $wan_if to any port
http keep state

here all http traffic from freebsd host goes to gw1




_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"

YES.

ON TUE, 10 JUN 2008 17:46:11 +0800
"ROSLI SUKRI" <ROSLISUKRIGMAIL.COM> WROTE:

> HI
> 
> SCENARIO:
> USERS---->[LAN]FREEBSDPF[WAN]----->{GW1,GW2}
> WHERE GW1 GOES TO ISP1, AND GW2 GOES TO ISP2.
> 
> 
> REQUIREMENTS:
> FTP, HTTP, HTTPS TRAFFIC GOES TO GW1
> TELNET, SSH, MAIL AND POP GOES TO GW2
> 
> CAN FREEBSDPF DO THIS?
> _______________________________________________
> FREEBSD-PFFREEBSD.ORG MAILING LIST
> HTTP://LISTS.FREEBSD.ORG/MAILMAN/LISTINFO/FREEBSD-PF
> TO UNSUBSCRIBE, SEND ANY MAIL TO
"FREEBSD-PF-UNSUBSCRIBEFREEBSD.ORG"


-- 
ÜDVöLETTEL,

CZUCZY GERGELY
HARMLESS DIGITAL BT
MAILTO: GERGELY.CZUCZYHARMLESS.HU
TEL: +36-30-9702963

On Tue, Jun 10, 2008 at 05:46:11PM +0800, Rosli Sukri
wrote:
> hi
> 
> scenario:
> users---->[lan]freebsdpf[wan]----->{gw1,gw2}
> where gw1 goes to isp1, and gw2 goes to isp2.
> 
> 
> requirements:
> ftp, http, https traffic goes to gw1
> telnet, ssh, mail and pop goes to gw2
> 
> can freebsdpf do this?
>

nat from any to any port = { ftp http https } tag W1 ->
(wan1)
nat from any to any port = { telnet ssh mail pop } tag W2
-> (wan2)

set skip on lan0
pass quick on wan1 tagged W1 keep state
pass quick route-to (wan1 gw1) tagged W1 keep state
pass quick on wan2 tagged W2 keep state
pass quick route-to (wan2 gw2) tagged W2 keep state

/swp
_______________________________________________
freebsd-pffreebsd.org mailing list

http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to
"freebsd-pf-unsubscribefreebsd.org"