Date: Tue, 4 Jul 2000 18:05:13 +0400 (MSD) From: "Andrey V. Sokolov" <abc@nns.ru> To: freebsd-security@FreeBSD.ORG Subject: Re: Forward to next hop in ipf Message-ID: <Pine.BSF.4.21.0007041734520.28761-100000@localhost> In-Reply-To: <200007041201.JAA13069@ns1.via-net-works.net.ar>
next in thread | previous in thread | raw e-mail | index | archive | help
IMHO "fastroute" is option for make a stealth forwarding without a ttl decrementing. I have tested "to" option default gateway is 192.168.0.1 The config string is: pass out log quick on ed0 to 192.168.0.2 from 192.168.0.2/32 to any where 192.168.0.2 is my new gateway, but it didn't works! The packets went to the default gateway, but not via the new gateway! But I'm not sure that "to" option works correctly with IP-address of the next-hop. As written in the man of ipf "to" option requires a interface-name. --- Andrey Sokolov On Tue, 4 Jul 2000, Fernando Schapachnik wrote: > En un mensaje anterior, Andrey V. Sokolov escribió: > > Hi! > > How to forward a packet matched by a rule to the desired next hop with > > IPFILTER compilled as the part of the kernel FreeDSD-4.0? > > I know how to do it with ipfw. > > Thanks. Andrey. > > Take a look at man 5 ipf, fastroute option. > > Regards. > > > > Fernando P. Schapachnik > Administración de la red > VIA NET.WORKS ARGENTINA S.A. > fernando@via-net-works.net.ar > (54-11) 4323-3333 > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0007041734520.28761-100000>