From owner-freebsd-net@FreeBSD.ORG Fri Nov 16 13:36:04 2007 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B8DEE16A469 for ; Fri, 16 Nov 2007 13:36:04 +0000 (UTC) (envelope-from iaccounts@ibctech.ca) Received: from pearl.ibctech.ca (pearl.ibctech.ca [208.70.104.210]) by mx1.freebsd.org (Postfix) with ESMTP id 4573113C447 for ; Fri, 16 Nov 2007 13:36:04 +0000 (UTC) (envelope-from iaccounts@ibctech.ca) Received: (qmail 80287 invoked by uid 1002); 16 Nov 2007 13:35:58 -0000 Received: from iaccounts@ibctech.ca by pearl.ibctech.ca by uid 89 with qmail-scanner-1.22 (spamassassin: 2.64. Clear:RC:1(208.70.104.100):. Processed in 6.522785 secs); 16 Nov 2007 13:35:58 -0000 Received: from unknown (HELO ?192.168.30.110?) (steve@ibctech.ca@208.70.104.100) by pearl.ibctech.ca with (DHE-RSA-AES256-SHA encrypted) SMTP; 16 Nov 2007 13:35:51 -0000 Message-ID: <473D9CB9.9050005@ibctech.ca> Date: Fri, 16 Nov 2007 08:35:53 -0500 From: Steve Bertrand User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: "Bruce M. Simpson" References: <473C5593.4080407@tnetus.com> <20071116001429.GE1499@beaver.trit.net> <473D3258.9040203@tnetus.com> <473D7AB5.1040403@FreeBSD.org> In-Reply-To: <473D7AB5.1040403@FreeBSD.org> X-Enigmail-Version: 0.95.5 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org, Brian Hawk , Dima Dorfman Subject: Re: Interface address sourced packets go thru default gateway on another interface X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Nov 2007 13:36:04 -0000 > As other contributors have suggested, if you really need source routing, > use pf or similar for that. I believe ipf also supports route-to on the > outbound. Another solutions would be that if there is only a known subset of networks sending you data over the leased line (such as a few /24's), then you can just statically route these blocks back over that connection. If not, as many others have said, it's policy based routing for you ;) Steve