reply-to in RELENG_7not working for networks attached to router

Crt Zerjal crt at soup.si
Mon Dec 22 07:23:04 PST 2008


hi, this is my config file that worked well on RELENG_6.2

ext_ip1 = "{ x.x.81.190 }"
ext_ip2 = "{ y.y.6.177 }"
gw1 = "{ x.x.81.161 }"
gw2 = "{ y.y.0.1 }"
# NAT
rdr on le0 proto tcp from any to $ext_ip1 port { 80 } -> 192.168.233.1
rdr on le2 proto tcp from any to $ext_ip2 port { 80 } -> 192.168.233.1
# RULES
pass  in  quick  on le0   reply-to ( em0 $gw1 )from any to any keep state
pass  in  quick  on le2 reply-to ( em1 $gw2 )  from any to any keep state

but on RELENG_7 if the ip accessing one of the wans is in the subnet of the
other wan
the response is routed through the wrong interface

-- some ip lets say y.y.15.123 acess the router on x.x.81.190 on port 80
then reaches my web server on 192.168.233.1 and should leave on the same
interface that it came in but it is routed back on the other if


More information about the freebsd-pf mailing list