Using the example from the PF User's Guide
(http://www.openbsd.org/faq/pf/pools.html#outgoing), what's the best way to
kill all states related to ONE of the route-to interfaces created by the
"pass in on $int_if route-to { ($ext_if1 $ext_gw1), ($ext_if2 $ext_gw2)
}..." rule?  It is a simple thing to kill interface-specific states
generated by the related "pass out on $ext_ifx route-to..." rules, but I'm
uncertain of the best way to do this for the first rule.

I've also considered using rules using the probability option instead of
route-to to more easily handle this, but using probability prevents the use
of sticky-address in this situation.

Thanks.

Reply via email to