[PF] Symmetric routing enforcement, how-to without using "reply-to"...

Nils Beyer nbe at renzel.net
Wed Apr 5 12:46:10 UTC 2017


I wrote:
> If I try
> 
>	ping -S 8.0.0.1 8.8.8.8
> 
> or
> 
>	ping -S 9.0.0.1 8.8.8.8
> 
> I always see packets only going out on the default gateway's interface.

sorry, my fault. After issuing a "pfctl -F all", these ICMP packets are
now going through the designated interface.

The problem by externally induced responses are still there, though...



Reagrds,
Nils


More information about the freebsd-net mailing list