[Fwd: choosing outgoing interface based on process uid]

2010-09-21 Thread Imre Oolberg
some more but if somebody could give a good guess why i have those host routes pointing to routing domain's default gateway it would be great! Imre Original Message Subject: choosing outgoing interface based on process uid Date: Sat, 18 Sep 2010 20:12:32 +03

Re: choosing outgoing interface based on process uid

2010-09-20 Thread Imre Oolberg
Hi! Stuart Henderson wrote: > On 2010-09-18, Imre Oolberg wrote: > >> 3. using route-to ($if_ext $if_ext_gw) construct on the pass out rule i >> can't change the interface the packet it getting out, its already >> decided, i can only choose the next hop gateway address with-in the >> network t

Re: choosing outgoing interface based on process uid

2010-09-19 Thread Stuart Henderson
On 2010-09-18, Imre Oolberg wrote: > 3. using route-to ($if_ext $if_ext_gw) construct on the pass out rule i > can't change the interface the packet it getting out, its already > decided, i can only choose the next hop gateway address with-in the > network the $if_ext is in not correct, you can

Re: choosing outgoing interface based on process uid

2010-09-18 Thread Imre Oolberg
Hi! I try to describe my understanding out the situation more closely and hope you can guide me further 1. since packets are generated locally packet filter match them only on outgoing direction 2. locally generated packets are routed according to the default routing table 3. using route-to ($if_

Re: choosing outgoing interface based on process uid

2010-09-18 Thread roberth
On Sat, 18 Sep 2010 20:12:32 +0300 Imre Oolberg wrote: > Hallo! > > I have OpenBSD v. 4.7 i386 firewall with two outgoing internet > connections (of which one is default gateway and the other could be > used with route-to, for example) and serveral networks behind it. On > the firewall runs Squi

choosing outgoing interface based on process uid

2010-09-18 Thread Imre Oolberg
Hallo! I have OpenBSD v. 4.7 i386 firewall with two outgoing internet connections (of which one is default gateway and the other could be used with route-to, for example) and serveral networks behind it. On the firewall runs Squid process as user _squid and it does transparent http proxy for inner