Re: [pfSense] Enforcing policy routing gateway

2015-01-20 Thread Steven Sherwood
and Discussion Mailing List Subject: Re: [pfSense] Enforcing policy routing gateway On Fri, Jan 9, 2015 at 11:07 PM, Tim Eggleston tim.li...@eggleston.camailto:tim.li...@eggleston.ca wrote: On 2015-01-09 19:45, Chris Bagnall wrote: Check the setting of System - Advanced - Miscellaneous - Skip

Re: [pfSense] Enforcing policy routing gateway

2015-01-20 Thread Chris L
would be great as an enhancement. Steve From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Moshe Katz Sent: Sunday, January 11, 2015 10:41 PM To: pfSense Support and Discussion Mailing List Subject: Re: [pfSense] Enforcing policy routing gateway On Fri, Jan 9, 2015 at 11

Re: [pfSense] Enforcing policy routing gateway

2015-01-11 Thread Moshe Katz
On Fri, Jan 9, 2015 at 11:07 PM, Tim Eggleston tim.li...@eggleston.ca wrote: On 2015-01-09 19:45, Chris Bagnall wrote: Check the setting of System - Advanced - Miscellaneous - Skip rules when gateway is down. Nice! That sounds like exactly what I'm after. Shame it's global and not a

Re: [pfSense] Enforcing policy routing gateway

2015-01-11 Thread Dave Warren
On 2015-01-11 19:40, Moshe Katz wrote: Depending on how complex your rules are, you could also create negative versions of them that explicitly block that traffic on all other interfaces except the VPN. (Aliases could help simplify that, but you may or may not actually want to do it,

Re: [pfSense] Enforcing policy routing gateway

2015-01-09 Thread Tim Eggleston
On 2015-01-09 19:45, Chris Bagnall wrote: Check the setting of System - Advanced - Miscellaneous - Skip rules when gateway is down. Nice! That sounds like exactly what I'm after. Shame it's global and not a per-policy-route or per-gateway setting but I'll take what I can get. Many thanks!

[pfSense] Enforcing policy routing gateway

2015-01-09 Thread Tim Eggleston
I use policy routing (Gateway under Advanced Features) to send traffic from certain hosts down a VPN which is originated on the pfsense machine. This works great. However I noticed today that when the VPN fails, the traffic falls back to the default gateway. In my scenario, this is not

Re: [pfSense] Enforcing policy routing gateway

2015-01-09 Thread Chris Bagnall
On 10 Jan 2015, at 03:30, Tim Eggleston tim.li...@eggleston.ca wrote: I use policy routing (Gateway under Advanced Features) to send traffic from certain hosts down a VPN which is originated on the pfsense machine. This works great. However I noticed today that when the VPN fails, the