From owner-freebsd-questions@FreeBSD.ORG  Tue Jan 20 00:12:35 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 267DA16A4CE
	for <freebsd-questions@freebsd.org>;
	Tue, 20 Jan 2004 00:12:35 -0800 (PST)
Received: from mail.lphp.org (APastourelles-107-1-5-46.w193-252.abo.wanadoo.fr
	[193.252.221.46])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C785B43D45
	for <freebsd-questions@freebsd.org>;
	Tue, 20 Jan 2004 00:12:32 -0800 (PST)
	(envelope-from ajacoutot@lphp.org)
Received: from admin.dioranews.local
	(ATuileries-108-2-1-224.w217-128.abo.wanadoo.fr [217.128.152.224])
	by mail.lphp.org (8.12.10/8.12.10) with ESMTP id i0K89w3p066179;
	Tue, 20 Jan 2004 09:09:58 +0100 (CET)
	(envelope-from ajacoutot@lphp.org)
From: Antoine Jacoutot <ajacoutot@lphp.org>
To: freebsd-questions@freebsd.org
Date: Tue, 20 Jan 2004 09:12:49 +0100
User-Agent: KMail/1.5.4
References: <200401200030.57555.ajacoutot@lphp.org>
In-Reply-To: <200401200030.57555.ajacoutot@lphp.org>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200401200912.49309.ajacoutot@lphp.org>
Subject: Re: Fwd: Re: Loading balancing with more than one ISP.
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Jan 2004 08:12:35 -0000

> > On Monday 19 January 2004 17:22, Tillman Hodgson wrote:
> > > You've pretty much wore out the "play with the config files" route.
> > > Let's try getting some data by finding out what is actually happening
> > > so we can figure out what's wrong. Can you post what the traffic on the
> > > other interface looks like when you're trying to go out from
> > > 192.168.0.0/24

All right people, it works :)
In fact, my only mistake was those rules (keep state):

pass in quick all keep state
pass out quick all keep state

My final working configuration:

# /etc/ipnat.rules
map tun1 192.168.0.0/24 -> 0/32 proxy port ftp ftp/tcp
map tun1 192.168.0.0/24 -> 0/32 portmap tcp/udp auto
map tun1 192.168.0.0/24 -> 0/32
map tun0 192.168.1.0/24 -> 0/32 proxy port ftp ftp/tcp
map tun0 192.168.1.0/24 -> 0/32 portmap tcp/udp auto
map tun0 192.168.1.0/24 -> 0/32

# /etc/ipf.rules
pass out quick on tun0 to tun1:@tun1_GW from 192.168.0.0/24 to any
pass in quick all
pass out quick all

Yeah :) I'm happy :)
All right, now I can work on filtering things...

Thanks a lot everybody.

Antoine