No Guido, I think what he means is like that: A FreeBSD box with three NICs:
NIC 1: Cable modem NIC 2: DSL (Main line: web hosting, mail server, etc...) NIC 3: LAN (192.168.1.x) The box will act as a dual router (if the cable is down, then DSL will be the backup line... Of course, he will need to change the path for the web service and other to be live on the NIC1.... But if we can figure it out a way to make the FreeBSD box as a dual router, then it will be perfect... Guido wrote: Yes you can solve it with a patch and a rule like this: pass in on <dsl-if> to <dls-if>:<router> <your spec> keep state e.g.: pass in on ep0 to ep0:1.2.3.4 from any to 10.0.0.1 port 80 keep state Normally ipfilter does not remember the interface a packet came in from, and the abover rule is disallowed. I made the attached patch a long time ago and probably it is not 100% correct. But it works for me. Use at your own risk and be advised I have absolutelyu no time right now to support it. -Guido
