Route ftp-proxy pasive mode to secondary Internet conection

2008-06-24 Thread Jon Rubio
Hello everyone, We need some help with the ftp-proxy on reverse mode. Thanks you very much for your help. The scenario: --- We have an OpenBSD firewall with two interfaces conected to Internet (bge0 ang bge1). The first interface is used to browse internet and access all external

Re: select outgoing route depending on souce interface (net)

2008-03-07 Thread Jon Rubio
Giancarlo Razzolini wrote: Hi, I was short on time to write the rule that time, but basically, your rdr is right. All you need is to edit you pass rule and add something like this: reply-to ($isp2_iface $isp2_gw). So, your complete rule might look like this: pass in on $isp2_iface

Re: select outgoing route depending on souce interface (net)

2008-03-06 Thread Jon Rubio
Giancarlo Razzolini wrote: Selective routing uses the route-to directive from pf. It's quite simple to use and, to achieve what you want, a simple rule like this should solve (the macros are wrong, was lazy to look them every time :): pass in on $dmz_if route-to ($isp2_iface $ips2_gw)

Re: select outgoing route depending on souce interface (net)

2008-03-06 Thread Jon Rubio
Giancarlo Razzolini wrote: Yep, you need a reply-to rule. I'll not write one here, but basically, you do the rdr rule for incoming traffic as you normally would. But in the pass rule, you say that this rule will reply-to, to the isp2. If you do not make a reply-to rule, the requests get to

Re: select outgoing route depending on souce interface (net)

2008-03-06 Thread Jon Rubio
Giancarlo Razzolini wrote: Yep, you need a reply-to rule. I'll not write one here, but basically, you do the rdr rule for incoming traffic as you normally would. But in the pass rule, you say that this rule will reply-to, to the isp2. If you do not make a reply-to rule, the requests get to

select outgoing route depending on souce interface (net)

2008-03-05 Thread Jon Rubio
Hello, IB4m a quite newbye on OpenBSD and need some help with routing dependent on the source network. This is the diagram of the scenary: (public IPs aren't the real ones) (ISP1) (ISP2) ADSL-DHCP SHDSL:80.25.145.193