Forcing a route using pf

[James Morris]

Hi,

While this does solve the issue of pushing traffic through igb0, however any income connections to igb1 from server B also get shunted out igb0.

I was wondering if there is a way to do this in pf.

This way I can say for any outbound connections to B use igb0, but if B contacts me on igb1 reply with the same IP.

Further I could probably restrict outbound by tcp ports too.

Thanks for the help.

James



From: Kurt Jaeger <lists at opsec.eu>
Sent: 27 October 2016 14:24
To: James Morris
Cc: freebsd-pf at freebsd.org
Subject: Re: Forcing a route using pf
    
Hi!

On Server A:

route add -host 10.10.10.100 10.0.0.1

On Server B:

route add -net 10.0.0.0/24 10.10.10.1

-- 
pi at opsec.eu            +49 171 3101372                         4 years to go !