From owner-freebsd-net@FreeBSD.ORG Thu Nov 27 16:50:07 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 327661065672 for ; Thu, 27 Nov 2008 16:50:07 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from mail.cksoft.de (mail.cksoft.de [62.111.66.27]) by mx1.freebsd.org (Postfix) with ESMTP id E4E6F8FC20 for ; Thu, 27 Nov 2008 16:50:06 +0000 (UTC) (envelope-from bzeeb-lists@lists.zabbadoz.net) Received: from localhost (amavis.str.cksoft.de [192.168.74.71]) by mail.cksoft.de (Postfix) with ESMTP id 294AB41C69F; Thu, 27 Nov 2008 17:50:06 +0100 (CET) X-Virus-Scanned: amavisd-new at cksoft.de Received: from mail.cksoft.de ([62.111.66.27]) by localhost (amavis.str.cksoft.de [192.168.74.71]) (amavisd-new, port 10024) with ESMTP id 5-w+ZQeRN2KL; Thu, 27 Nov 2008 17:50:05 +0100 (CET) Received: by mail.cksoft.de (Postfix, from userid 66) id D27AE41C6A3; Thu, 27 Nov 2008 17:50:05 +0100 (CET) Received: from maildrop.int.zabbadoz.net (maildrop.int.zabbadoz.net [10.111.66.10]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.int.zabbadoz.net (Postfix) with ESMTP id C5DE04448D5; Thu, 27 Nov 2008 16:47:52 +0000 (UTC) Date: Thu, 27 Nov 2008 16:47:52 +0000 (UTC) From: "Bjoern A. Zeeb" X-X-Sender: bz@maildrop.int.zabbadoz.net To: Frank Behrens In-Reply-To: <200811271542.mARFgglB004902@post.behrens.de> Message-ID: <20081127164201.M61259@maildrop.int.zabbadoz.net> References: <200811271425.mAREPSwm004057@post.behrens.de> <200811271542.mARFgglB004902@post.behrens.de> X-OpenPGP-Key: 0x14003F198FEFA3E77207EE8D2B58B8F83CCF1842 MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd-net@freebsd.org Subject: Re: Problem with new source address selection X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Nov 2008 16:50:07 -0000 On Thu, 27 Nov 2008, Frank Behrens wrote: Hi, I am running out the door but ... will check again tonight. > Bjoern A. Zeeb wrote on 27 Nov 2008 14:53: [gif-like ipsec and routes] routes are not alternatives for fixing applications;) Often it's easier to apply a hack instead of fix the application but that's a different story... >> So is your 192.168.90.0/24 on any other interface but the lo2? >> Is it the only network on that interface or are there aliases? > > For this machine the simplified setup is: > - an ethernet interface for private net with address 192.168.90.1/24 > and additional aliases for external addresses ... > Now I want to tunnel between my 192.168.90.0/24 and a foreign > 192.168.200.0/24. So I assigned 192.168.90.254/32 to lo2 and created > a static route. So if you don't mind to go out with a source address of 192.168.90.1 instead of .254, what about this hack. What happens if you change the route to route change -net 192.168.200.0/24 192.168.90.2 (assuming the .2 is not on your local machine). /bz -- Bjoern A. Zeeb Stop bit received. Insert coin for new game.