tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: working example setup for source-based routing with ipfilter?



> The idea is to route outgoing packets to the interface that would
> receive their source addresses (else my upstreams would filter them).

That kind of routing is exactly what srt interfaces are for.  I just
now looked, and the version in the 5.1 source tarballs appears to at
least try to support INET6.  NetBSD's version is missing a change that
makes it cooperate with "keep state" style firewalling (eg, most NAT
setups), but that is unlikely to matter for v6.  However, it may be
effectively unmaintained; it doesn't seem to have real locking calls in
it, and might not work right on little-endian machines - comparing it
against my version I see an ntohl which I think I added when I started
using it on i386 (for most of its existence I was using it on sparc).

Still, might be worth trying.

Of course, if you have some reason for wanting to do this with ipfilter
in particular, then ignore me. :-)

/~\ The ASCII                             Mouse
\ / Ribbon Campaign
 X  Against HTML                mouse%rodents-montreal.org@localhost
/ \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B


Home | Main Index | Thread Index | Old Index