Dual WAN, outgoing routing problem

2006-08-16 Thread George Pontis
Firewall using OpenBSD 3.8, 2 WAN, 1 LAN I am experiencing a problem with my configuration of pf as regards the choice of WAN ports to route an outgoing packet. Can someone help please ? The scenario comes up when ext_if1 is the default gateway in the routing tables, but I am trying to use a

Dual WAN, outgoing routing problem

2006-08-16 Thread George Pontis
Config: Firewall using OpenBSD 3.8, 2 WAN, 1 LAN I am experiencing a problem with my configuration of pf as regards the choice of WAN ports to route an outgoing packet. Can someone help please ? The scenario comes up when ext_if1 is the default gateway in the routing tables, but I am trying to

Re: Dual WAN, outgoing routing problem

2006-08-16 Thread Daniel Hartmeier
On Wed, Aug 16, 2006 at 02:04:32PM -0700, George Pontis wrote: pass in quick on $int_if \ route-to ($ext_if2 $ext_gw2) \ inet proto tcp from 192.168.1.120 to any flags S/SA \ keep state (floating) \ You seem to be assuming that a floating state created on $int_if will

RE: Dual WAN, outgoing routing problem

2006-08-16 Thread George Pontis
On Wed, Aug 16, 2006 at 02:04:32PM -0700, George Pontis wrote: pass in quick on $int_if \ route-to ($ext_if2 $ext_gw2) \ inet proto tcp from 192.168.1.120 to any flags S/SA \ keep state (floating) \ You seem to be assuming that a floating state created on $int_if will

Re: Dual WAN, outgoing routing problem

2006-08-16 Thread Daniel Hartmeier
On Wed, Aug 16, 2006 at 08:33:10PM -0700, George Pontis wrote: # # route packets from any IPs on $ext_if1 to $ext_gw1 and the same for ext_if2 to ext_gw2 # pass out on $ext_if2 route-to ($ext_if1 $ext_gw1) from $ext_if1 to any flags S/SA keep state pass out on $ext_if1 route-to ($ext_if2