Date: Tue, 4 Jul 2000 19:33:25 +0400 (MSD) From: "Andrey V. Sokolov" <abc@nns.ru> To: Fernando Schapachnik <fpscha@via-net-works.net.ar> Cc: freebsd-security@FreeBSD.ORG Subject: Re: Forward to next hop in ipf Message-ID: <Pine.BSF.4.21.0007041920270.28761-100000@localhost> In-Reply-To: <200007041441.LAA02739@ns1.via-net-works.net.ar>
next in thread | previous in thread | raw e-mail | index | archive | help
Yes, yes, yes! It worked! I little modify the my config string: pass out log quick on ed0 to ed0:192.168.0.2 from 192.168.0.3/32 to any And the all packets went to new gateway!:-) And also, I have tested it with: route delete 0.0.0.0 route add 0.0.0.0 192.168.0.7 where 192.168.0.7 is a nonexistent host! And it worked too! Thanks! --- Andrey Sokolov On Tue, 4 Jul 2000, Fernando Schapachnik wrote: > > IMHO "fastroute" is option for make a stealth forwarding without a ttl > > decrementing. > > You are right. > > > I have tested "to" option > > default gateway is 192.168.0.1 > > The config string is: > > pass out log quick on ed0 to 192.168.0.2 from 192.168.0.2/32 to any > > where 192.168.0.2 is my new gateway, but it didn't works! > > >From the ipf how-to: you would be better off with something like: > > block out log quick on ed0 to <iface> from <ip>/32 to any > > You will be blocking the normal packet and deviating the original one > to <iface>. Besides, I can't see the point of "to 192.168.0.2 from > 192.168.0.2". > > Good luck! > > > Fernando P. Schapachnik > Administración de la red > VIA NET.WORKS ARGENTINA S.A. > fernando@via-net-works.net.ar > (54-11) 4323-3333 > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0007041920270.28761-100000>