From owner-freebsd-questions@FreeBSD.ORG Mon Jan 19 00:25:13 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D75C816A4CE for ; Mon, 19 Jan 2004 00:25:13 -0800 (PST) Received: from mail.lphp.org (APastourelles-107-1-16-132.w80-14.abo.wanadoo.fr [80.14.185.132]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8A91043D1D for ; Mon, 19 Jan 2004 00:25:11 -0800 (PST) (envelope-from ajacoutot@lphp.org) Received: from admin.dioranews.local (ATuileries-108-2-1-224.w217-128.abo.wanadoo.fr [217.128.152.224]) by mail.lphp.org (8.12.10/8.12.10) with ESMTP id i0J8MqQ5054516; Mon, 19 Jan 2004 09:22:53 +0100 (CET) (envelope-from ajacoutot@lphp.org) From: Antoine Jacoutot To: freebsd-questions@freebsd.org Date: Mon, 19 Jan 2004 09:25:01 +0100 User-Agent: KMail/1.5.4 References: <200401181036.35702.ajacoutot@lphp.org> In-Reply-To: <200401181036.35702.ajacoutot@lphp.org> MIME-Version: 1.0 Content-Disposition: inline Message-Id: <200401190924.50284.ajacoutot@lphp.org> Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: Re: Re: Loading balancing with more than one ISP. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Jan 2004 08:25:14 -0000 On Sunday 18 January 2004 10:36, Antoine Jacoutot wrote: > ipfw add fwd netconnexion1_gw ip from DMZ/netmask to any > ipfw add fwd netconnexion2_gw ip from LAN/netmask to any Allright people. So I'm still trying to make my setup working (using IPFILTER). Thanks for the help you gave, I finally ended up to the next configuration: tun0: 1.2.3.4 --> 111.222.333.444 netmask 0xffffffff tun1: 5.6.7.8 --> 555.666.777.888 netmask 0xffffffff # /etc/ipf.rules pass out quick on tun0 to tun1:555.666.777.888 from 192.168.0.0/24 to any pass out quick on tun1 to tun0:111.222.333.444 from 192.168.1.0/24 to any pass in quick all keep state pass out quick all keep state # /etc/ipnat.rules map tun1 192.168.0.0/24 -> 5.6.7.8/32 map tun0 192.168.1.0/24 -> 1.2.3.4/32 Now, it does NOT work... 192.168.1.0 --> Internet works with no problem (tun0 being the default rout= e=20 on the FreeBSD gateway) 192.168.0.0 --> Internet doesn't work :( What did I miss ? =46rom what I see, I can't find any mistakes... although there must be one. Antoine