From owner-freebsd-questions  Wed Jun 26 17:11:50 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.flarion.com (mail.flarion.com [63.103.94.23])
	by hub.freebsd.org (Postfix) with ESMTP
	id B9F5537BAA9; Wed, 26 Jun 2002 16:08:05 -0700 (PDT)
Received: by rrmail01.lab.flarion.com with Internet Mail Service (5.5.2653.19)
	id <NKLCW5T9>; Wed, 26 Jun 2002 17:01:13 -0400
Message-ID: <8C92E23A3E87FB479988285F9E22BE46FDE777@ftmail.lab.flarion.com>
From: Matt Impett <M.Impett@flarion.com>
To: 'Lars Eggert' <larse@ISI.EDU>, Matt Impett <M.Impett@flarion.com>
Cc: "'freebsd-net@freebsd.org'" <freebsd-net@freebsd.org>,
	"'freebsd-questions@freebsd.org'" <freebsd-questions@freebsd.org>
Subject: RE: source address based routing
Date: Wed, 26 Jun 2002 17:01:09 -0400
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

I have looked at the firewall rather exetensively, but I don't know that it
can do what I want.

From what I can tell, the firewall fwd functionality allows you to redirect
a packet to a different next hop based on any of the firewall matching rules
(one of which is source address).

What I want to do, however, is redirect the packet to a tunnel (gif device)
that has no next-hop associated with it.  Is there any way to do this??

thanks,
matt

> -----Original Message-----
> From: Lars Eggert [mailto:larse@ISI.EDU]
> Sent: Wednesday, June 26, 2002 4:41 PM
> To: Matt Impett
> Cc: 'freebsd-net@freebsd.org'; 'freebsd-questions@freebsd.org'
> Subject: Re: source address based routing
> 
> 
> Matt Impett wrote:
> > I was wondering if it is possible to do pure source address 
> based routing
> > under FreeBSD.  What I really want to do is route packets 
> from particular
> > source addresses to tunnels (gif devices) regardless of 
> what the packet's
> > destination address is.
> 
> Firewall forwarding will do that, see ipfw (8), esp. the fwd action.
> 
> Lars
> -- 
> Lars Eggert <larse@isi.edu>           USC Information 
> Sciences Institute
> 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message