From owner-freebsd-pf@FreeBSD.ORG Wed Mar 19 13:36:32 2008 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A89C2106566C for ; Wed, 19 Mar 2008 13:36:32 +0000 (UTC) (envelope-from wcglist@gmail.com) Received: from el-out-1112.google.com (el-out-1112.google.com [209.85.162.181]) by mx1.freebsd.org (Postfix) with ESMTP id 691B48FC38 for ; Wed, 19 Mar 2008 13:36:32 +0000 (UTC) (envelope-from wcglist@gmail.com) Received: by el-out-1112.google.com with SMTP id v27so266680ele.12 for ; Wed, 19 Mar 2008 06:36:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type; bh=ee3qD46sLMK8EIAm6YVGpfBdujX7nf7z38PiE3rRbVU=; b=r1Kn1AUjKuJxEDFwkvHvq1vErNIgw9UnU3yqYtasECqlCh6BctKcZ5aq6O4lf3LWZ7Zyt0M7jBGVfqe181v8TLpRhVZNEwfbZNlaVMV1Usf2rZqA1QGy2NYJlGAmt9nGnocPp6Ph+mrLDVStqxdT5M6rzX66dVTkIv9EPuDwh8U= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=message-id:date:from:to:subject:mime-version:content-type; b=rScVb021SiitrLIaDrYH2JKcp638XKjAlWQ0SEBJRyobMyNrgIqhVUUfEY+//HWF72cbrk/ug6aCG102ZEd7USh11xzucQ/O1lCEo2sgMcXsSYCyPFz+9VeDAnK0djleAtxv7j0VtEPGOxjs1QxaRv0fL+y5XIw1I94U0n+4bcY= Received: by 10.140.54.6 with SMTP id c6mr83058rva.37.1205932280597; Wed, 19 Mar 2008 06:11:20 -0700 (PDT) Received: by 10.141.123.18 with HTTP; Wed, 19 Mar 2008 06:11:20 -0700 (PDT) Message-ID: Date: Wed, 19 Mar 2008 10:11:20 -0300 From: Wesley To: freebsd-pf@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: route-to not working X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Mar 2008 13:36:32 -0000 Dear people, I have 2 links on a box, and I don't want to load balance it but, only to reply requests in the same interface that it comes. I tried to use the route-to, but it not seems to work. Could you please, give-me a help? It's my configuration: set skip on lo0 scrub on xl0 reassemble tcp no-df random-id scrub on xl1 reassemble tcp no-df random-id scrub on dc0 reassemble tcp no-df random-id nat on xl0 from 172.16.0.0/24 to any -> (xl0) static-port rdr on dc0 inet proto tcp to port 80 -> 127.0.0.1 port 3128 round-robin sticky-address antispoof quick for {xl0,dc0,xl1} block proto tcp from 172.16.0.0/24 to any port 3128 # Internal Traffic pass in quick on dc0 from any to any pass out quick on dc0 from any to any # Outgoing pass out on xl0 proto tcp all flags S/SA modulate state pass out on xl0 proto { udp, icmp } all keep state pass out on xl1 proto tcp all flags S/SA modulate state pass out on xl1 proto { udp, icmp } all keep state # Pass basic services pass in quick on xl1 proto tcp from any to any port { 22, 21, 1194 } keep state pass in quick on xl0 proto tcp from any to any port { 22, 21, 1194 } keep state pass in on xl0 proto udp from any to any port 53 pass in on xl1 proto udp from any to any port 53 # Pass VPN pass in quick on xl1 proto udp from any to port 1194 keep state pass quick on tun0 # Source nat route pass out log on xl0 route-to ( xl1 200.232.164.1 ) from xl1 to any pass out on xl1 route-to ( xl0 201.83.16.1 ) from xl0 to any # Close block return-rst in log quick on xl0 inet proto tcp from any to any block return-rst in log quick on xl1 inet proto tcp from any to any block return-icmp in log quick on xl0 proto udp from any to any block return-icmp in log quick on xl1 proto udp from any to any block in quick on xl0 all block in quick on xl1 all Best Regards, Wesley Gentine