Re: Policy-based routing with ipf

[mlelstv%serpens.de@localhost (Michael van Elst)]

netbsd%precedence.co.uk@localhost (Stephen Borrill) writes:

>   10.3.0.1 <-> NetBSD <-> 192.168.102.1
>10.3.0.254 <-> filter <-> 192.168.102.254

>My plan is to use policy-based routing to direct matched traffic back to 
>192.168.102.x via 10.3.0.254 (e.g. http or smb). I cannot work out how to 
>achieve this from the man page though.


Assuming the following interface names:

             wm0        wm1
>   10.3.0.1 <-> NetBSD <-> 192.168.102.1

this should be:

pass out quick on wm1 to wm0:10.3.0.254 from 10.3.0.1 to 192.168.102.0/24

pass out quick on wm1               packets sent by wm1
to wm0:10.3.0.254                   redirect to wm0 with next hop 10.3.0.254
from 10.3.0.1                       if src is the NetBSD box
to 192.168.102.0/24                 and dst is on the other net