On Tue, Aug 13, 2002 at 10:25:19PM +0200, Matijs wrote: > pass out on ne1 route-to ne1:123.123.123.7 from any to 123.123.123.123 keep > state > > ... but this doesn't work. Pings to 123.123.123.123 get 'replied' to through > the rl0 (234.234.234.234) interface.
I assume your default route is through rl0. The problem is that the above rule does only apply to packets that go out through ne1, which the packets in question don't (due to the default route). Try pass out on rl0 route-to ne1:123.123.123.7 ... instead. Daniel
