A web server behind two gateways?
brahmann
brahmann at lifec0re.net
Mon Jul 17 18:19:03 UTC 2017
Hi, you can use(if itsobe server with two uplinks) ipfw probe 0,5, two separate flows for two fibs, with some two flowfib script.
I did that once and work like a charm.
Wbr, brahmann
17 липня 2017 р. 20:33:47 GMT+03:00, Eugene Grosbein <eugen at grosbein.net> написав:
>18.07.2017 0:26, Kurt Jaeger wrote:
>
>> I have a vague idea:
>>
>> If you set a tag (or a keep-state :flowname) using a ipfw rule that
>matches
>> the incoming gateway MAC and match that tag/check-state flowname and
>> the connection (keep-state) to fwd the answer packet back to that
>gateway ?
>
>In fact, the NAT engine already keeps state track of packet flows
>and uses that to correctly translate answers back to public IP address.
>
>All you need is to forward translated outgoing answers to correct
>channel
>based on translated external source IP address (read: do policy based
>forwarding).
>
>
>_______________________________________________
>freebsd-net at freebsd.org mailing list
>https://lists.freebsd.org/mailman/listinfo/freebsd-net
>To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
>
>
>!DSPAM:596cf513971106642921193!
--
Відправлено з мого Android пристрою з K-9 Mail. Вибачте за стислість.
More information about the freebsd-net
mailing list