From owner-freebsd-questions@FreeBSD.ORG Fri Aug 27 01:17:21 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2988110656C4 for ; Fri, 27 Aug 2010 01:17:21 +0000 (UTC) (envelope-from bc979@lafn.org) Received: from zoom.lafn.org (zoom.lafn.org [206.117.18.8]) by mx1.freebsd.org (Postfix) with ESMTP id 0D5348FC08 for ; Fri, 27 Aug 2010 01:17:20 +0000 (UTC) Received: from [10.0.1.4] (pool-71-109-159-124.lsanca.dsl-w.verizon.net [71.109.159.124]) (authenticated bits=0) by zoom.lafn.org (8.14.3/8.14.2) with ESMTP id o7R1HJ5N021151 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for ; Thu, 26 Aug 2010 18:17:20 -0700 (PDT) (envelope-from bc979@lafn.org) From: Doug Hardie Content-Type: text/plain; charset=us-ascii Message-Id: <96E6F9A3-49F5-4C55-8248-6D62717636DF@lafn.org> Date: Thu, 26 Aug 2010 18:17:19 -0700 To: freebsd general questions Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Apple Message framework v1081) X-Mailer: Apple Mail (2.1081) X-Virus-Scanned: clamav-milter 0.95.3 at zoom.lafn.org X-Virus-Status: Clean Subject: Routing Question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Aug 2010 01:17:21 -0000 I have several servers with one ethernet interface. Currently it is = connected via a WAN to the internet. We are in the midst of switching = to a different provider. I would like to be able to operate with both = temporarily until all the users/services get switched. The new circuit = is in and working. I would like somehow to configure the system (I have = pf in use) to be able to detect the packets that come from a specific = router and route the return packets back through it. The other network = would be the default. PF's route_to will return the packets to the = proper router, but I have not been able to figure out which ones those = would be. The source IP address can be any on either network and its = highly likely that we will see packets from the same source network on = both at the same time. The only distinction I see in the input packets = between the two paths is the MAC address of the router. I don't see any = way in pf or the system to use that to affect the return path though.=