Subject: Re: ipf fastroute next-hop?
To: Darren Reed <darrenr@reed.wattle.id.au>
From: Carl Brewer <carl@bl.echidna.id.au>
List: tech-net
Date: 04/22/2002 11:54:06
Darren Reed wrote:
> In some email I received from der Mouse, sie wrote:
> [Charset iso-8859-1 unsupported, filtering to ASCII...]
> 
>>When using ipf's "fastroute" option to redirect a packet out an
>>interface, what controls the next-hop address used?
>>
>>For example, if I do
>>
>>	pass out quick fastroute le1 on le0 from 10.0.0.0/8 to any
>>
>>to redirect all traffic that would normally go out le0, but which comes
>>from 10/8, out le1 instead, how do I control the next-hop gateway
>>address used when sending the packet out le1?  (For example, if the arp
>>table for le1 is empty, what controls what address will be arped for?)
> 
> 
> pass out quick on le0 to le1:ne.xt.h.op from 10.0.0.0/8 to any


Does this mean you've changed the syntax?  It was (?) block
not pass, in the past.  Does IPF now recognise what the rule
is asking for and not duplicate the packet, or was the old
doco in error?

Carl