Policy - based Routing problem Need help

Julian Elischer julian at elischer.org
Sat Jul 28 07:15:26 UTC 2007


Narek Gharibyan wrote:
> Hi all,
> 
> I have a firewall/router with FreeBSD 6.2 installed on it. 2 ISP connection
> and 2 LAN connections. I need to do a policy-based routing. All I need that
> packets coming from one ISP interface return to that interface (incoming
> connections' source based routing) and the other hand do a IP based routing
> from the LAN (Some packets will goes out via ISP 1 some others via ISP 2
> depending on IPs requested). I tried to do that with ipfw fwd but it didn't
> work any way (e.g. with ip.forwarding enabled or no). Even I've disabled my
> static routes, default gw. Just it do nothing. Sample configs are
> 
> ipfw add fwd ISP_gw from ${my lan} to any via ${eif}
> ipfw add fwd ISP_gw from ${my lan} to any out via ${eif}
> ipfw add fwd ISP_gw from any to any xmit ${eif}



I believe you want to route INCOMING sessions right?

what is the topology of the rest of your network?


> 
> Ipfw add fwd ISP_gw from any to any via ${eif} out
> 
> I don't use nat, proxy. Just need to route.
>  
> 
> Please help
> 
>  
> 
> Regards,
> 
> Narek
> 
>  
> 
> _______________________________________________
> freebsd-ipfw at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"



More information about the freebsd-ipfw mailing list