actually Guido was right, unfourtunately stupid cable is dhcp, so changing web/mail etc to it, wont be a good idea, espeacially with back-resolv.
I got this config running with ipfw fwd rule. thank you all for help. i think i should be able to throw natd back and forth in case cable goes down, that can be done through simple health check script (i think). On Thu, Dec 05, 2002 at 05:53:27AM -0500, Dang.Johnny wrote: > > No Guido, I think what he means is like that: > > A FreeBSD box with three NICs: > > NIC 1: Cable modem > NIC 2: DSL (Main line: web hosting, mail server, etc...) > NIC 3: LAN (192.168.1.x) > > The box will act as a dual router (if the cable is down, then DSL will be > the backup line... Of course, he will need to change the path for the web > service and other to be live on the NIC1.... But if we can figure it out a > way to make the FreeBSD box as a dual router, then it will be perfect... > > Guido wrote: > > Yes you can solve it with a patch and a rule like this: > > pass in on <dsl-if> to <dls-if>:<router> <your spec> keep state > > e.g.: > pass in on ep0 to ep0:1.2.3.4 from any to 10.0.0.1 port 80 keep state > > Normally ipfilter does not remember the interface a packet came in from, > and the abover rule is disallowed. > > I made the attached patch a long time ago and probably it is not 100% > correct. > But it works for me. Use at your own risk and be advised I have > absolutelyu no time right now to support it. > > -Guido
