Date: Wed, 25 Jul 2007 10:12:29 GMT From: Narek <ngharibyan@mail.ru> To: freebsd-gnats-submit@FreeBSD.org Subject: i386/114891: Policy Based Routing Problem (ipfw fwd) Message-ID: <200707251012.l6PACTgc010074@www.freebsd.org> Resent-Message-ID: <200707251020.l6PAK2DF084168@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 114891
>Category: i386
>Synopsis: Policy Based Routing Problem (ipfw fwd)
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-i386
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Wed Jul 25 10:20:01 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator: Narek
>Release: 6.2 RELEASE
>Organization:
SIS
>Environment:
P4 2000 512MB RAM
Named, gateway,SSH, Snmp, Firewall (ipfw)
>Description:
I have a firewall/router with FreeBSD 6.2 installed on it. 2 ISP connection and 2 LAN connections. I need to do a policy-based routing. All I need that packets coming from one ISP interface return to that interface (incoming connections’ source based routing) and the other hand do a IP based routing from the LAN (Some packets will goes out via ISP 1 some others via ISP 2 depending on IPs requested). I tried to do that with ipfw fwd but it didn’t work any way (e.g. with ip.forwarding enabled or no). Even I've disabled my static routes, default gw. Just it do nothing. Sample configs are
ipfw add fwd ISP_gw from ${my lan} to any via ${eif}
ipfw add fwd ISP_gw from ${my lan} to any out via ${eif}
ipfw add fwd ISP_gw from any to any xmit ${eif}
I don’t use nat, proxy. Just need to route.
>How-To-Repeat:
always
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200707251012.l6PACTgc010074>