Would love it if someone could share a thought on how to handle
this--can't seem to think up a way to do this simply...

On Tue, Mar 23, 2010 at 7:54 PM, Daniel Melameth <dan...@melameth.com> wrote:
> Using the example from the PF User's Guide
> (http://www.openbsd.org/faq/pf/pools.html#outgoing), what's the best way to
> kill all states related to ONE of the route-to interfaces created by the
> "pass in on $int_if route-to { ($ext_if1 $ext_gw1), ($ext_if2 $ext_gw2)
> }..." rule?  It is a simple thing to kill interface-specific states
> generated by the related "pass out on $ext_ifx route-to..." rules, but I'm
> uncertain of the best way to do this for the first rule.
>
> I've also considered using rules using the probability option instead of
> route-to to more easily handle this, but using probability prevents the use
> of sticky-address in this situation.
>
> Thanks.

Reply via email to