Re: route-to problem; traffic remains on the default link

2004-08-13 Thread Jason Opperisano 
On Fri, 2004-08-13 at 04:18, Paul Cusbish wrote:
> My problem is with route-to.  It seems to have no effect in my case.  For the 
> record, I don't have any nat rules on this link - My suspicion is that the nat'd 
> link is "grabbing" the packet bound for the route-to gateway, but i'm probably wrong.

while it seems unrelated to the question at hand--if you don't have an
outbound NAT for traffic exiting this interface, how is this supposed to
work?  is your LAN addressed with publicly-routed IP's?

> my route-to line is as follows:
> 
> pass in quick on xl0 route-to ($adsl_if $adsl_nexthop) inet proto tcp from 
> $workstation to any port 25 keep state

> I can attach more rules if needed

i think that would be beneficial.

-j

=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~
Faster, faster, you fool, you fool! -- Bill Cosby
=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~

route-to problem; traffic remains on the default link

2004-08-13 Thread Paul Cusbish 
Hi there,

I have a common setup (seen it a few times on this list) - 

xl0  LAN
fxp0   Cable / dynamic address
fxp1   ADSL / static (DNS, SMTP, HTTP etc...)

The default gateway is fxp0, of which is nat'd.

The fxp1 link is, as specified above, the "services" link.  I have some reply-to rules 
for SMTP, HTTP etc,
to avoid asymmetric routing, which works great.

My problem is with route-to.  It seems to have no effect in my case.  For the record, 
I don't have any nat rules on this link - My suspicion is that the nat'd link is 
"grabbing" the packet bound for the route-to gateway, but i'm probably wrong.

my route-to line is as follows:

pass in quick on xl0 route-to ($adsl_if $adsl_nexthop) inet proto tcp from 
$workstation to any port 25 keep state

but this fails to work, and mail is routed out of the fxp0 / cable link, which falls 
into certain spam black holes due to the prolific spammy nature of my isp.

Can anyone please assist me with this? I've tried for ages, but to no avail.

I can attach more rules if needed

cheers

pc.

_
[EMAIL PROTECTED]
http://www.digiverse.net