From owner-freebsd-net@freebsd.org Thu Mar 30 17:04:51 2017 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 03E2FD26EE8 for ; Thu, 30 Mar 2017 17:04:51 +0000 (UTC) (envelope-from kudzu@tenebras.com) Received: from mail-qk0-x236.google.com (mail-qk0-x236.google.com [IPv6:2607:f8b0:400d:c09::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id B29DCD2 for ; Thu, 30 Mar 2017 17:04:50 +0000 (UTC) (envelope-from kudzu@tenebras.com) Received: by mail-qk0-x236.google.com with SMTP id d10so45800558qke.1 for ; Thu, 30 Mar 2017 10:04:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tenebras-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=X1a8JP9M5R9BIPuZB1AaYJieSTRueap9AyLIafPj6g4=; b=u4JTJXo8Cd5nz8TAIb/dUBK03+zdfbRm5UTCVLrFle2Tx46Su2DpkXPm2Hp4ylIieU 2kTjZjCm9YU6sGGSjt7PrgVblSBjnUZZAFUSU6TxlRFKjVMg6MX+0Yh2PX2C5A9ouHYl zIpVIcxpsVZr8ZhbGFhBCdtfSQJVCF2S/Bh2gzmLhk6hQQa04sWxxIRSCq3FV2R74p52 IQjZhIxyuTHzWcGUIr2w6egKeRdg9cYRIoA/3/O6gL7OEqTtI72zuNyZT5nD3vcv2akN lNDQCqRI4y16R0HsniVgGMCxKx5chomxlnO5/NIzpIMSfJfM4btKhh6TeQac6ctTj+GK F0uA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=X1a8JP9M5R9BIPuZB1AaYJieSTRueap9AyLIafPj6g4=; b=B90q6cdUVnR6cCFG9NmCXzliUXt3ATikNoWEr7fbPuQ7dRyjhiLwHg6Lq6MHJGK2k/ n6JMtkAvjsDvrMMwidVhYdPnatYjg4hodOi3+9k6uEaKlC7oMyMYq6Qc8md751Vooenn 0CPjqYcpd5628pBiJ9yMdFNbV/wE8pFz0ERUqEO2FoWuXXB4SbCNOlcPFWkPvwOxGJR2 8MdcLbKr3WrO0usKgIrJ99RiMOMqwEphQEY3EzUJUUo6KHXckjYRKmDhu3iv/9JrlRCr AVfo4lNHHWfyZpJ3lU2psNoknUe5kUdBfA0+mgIsVgcZxk6h/sCprgimudFZO6hRBkBy K+mQ== X-Gm-Message-State: AFeK/H2tYedNfneTnrUC5FxbXqZ2z3NPHrTVGMBLwhTRAWJxNwTtlmuQ9TyGzQpEhg5rKZ/KQjh2ObuPVx4HUmfx X-Received: by 10.55.155.141 with SMTP id d135mr743418qke.75.1490893489451; Thu, 30 Mar 2017 10:04:49 -0700 (PDT) MIME-Version: 1.0 Received: by 10.200.39.182 with HTTP; Thu, 30 Mar 2017 10:04:49 -0700 (PDT) In-Reply-To: References: <20170330032222.GA18053@admin.sibptus.transneft.ru> <81f24563-1abb-e804-d2a3-7fa772a0c78d@netfence.it> <20170330074615.GA25049@admin.sibptus.transneft.ru> From: Michael Sierchio Date: Thu, 30 Mar 2017 10:04:49 -0700 Message-ID: Subject: Re: OpenVPN and policy routing To: Andrea Venturoli Cc: Victor Sudakov , freebsd-net@freebsd.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.23 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Mar 2017 17:04:51 -0000 I use different FIBs in the ipfw ruleset to accomplish policy based routing, including via a tun interface. - M On Thu, Mar 30, 2017 at 9:24 AM, Andrea Venturoli wrote: > On 03/30/17 09:46, Victor Sudakov wrote: > > Will "ipfw fwd" do the trick? I could "ipfw fwd" the packets into the >> tun0 interface, but will OpenVPN understand that? >> > > Never tried this, sorry. > > bye > av. > > _______________________________________________ > freebsd-net@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > --=20 "Well," Brahma said, "even after ten thousand explanations, a fool is no wiser, but an intelligent person requires only two thousand five hundred." - The Mah=C4=81bh=C4=81rata