Trying to setup DSR load balancing with pf route-to

Ed Schouten ed at fxq.nl
Wed Mar 7 10:23:20 UTC 2007


Hello,

I have the same problem as well. The route-to doesn't seem to be able to
emit packets at all. I have a setup like this:

	-----+----------+----- <- 10.0.0.0/24 - outside
	     |          |
	+----+---+  +---+----+
	| PF box |  | Router |
	+--------+  +---+----+
	                |
	----------------+----- <- 192.168.0.0/24 - inside

I'm able to reproduce this issue with this really simple pf.conf:

| pass in log on xl0 route-to (xl0 10.0.0.7) to 192.168.0.0/24

When packets from the outside to 192.168.0.0/24 arrive at the PF box,
the above rule will match the packets. `tcpdump -i pflog0 -n -e' will
match the packets, but they are not routed to the router. They just get
trashed. dup-to will also only route the packet to the default route.
This means that routing packets to a specific address is broken right
now.

Yours,
-- 
 Ed Schouten <ed at fxq.nl>
 WWW: http://g-rave.nl/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20070307/66aad59d/attachment.pgp


More information about the freebsd-pf mailing list