route-to doesnot work for me - what am i doing wrong

2008-10-14 Thread Siju George
Hi, I have firewall sk0 - LAN Interface rl1 - Primary internet connection rl2 - secondary Internet connection I have a line in pf.conf pass in quick on $int_if route-to ( $ext_if2 $ext_ifgw ) from to any keep state to route requests from hosts in through the rl2 internet connection but it do

Re: route-to doesnot work for me - what am i doing wrong

2008-10-14 Thread Insan Praja SW
On Tue, 14 Oct 2008 14:33:19 +0700, Siju George <[EMAIL PROTECTED]> wrote: Hi Siju, I think there are several things you need to understand more about pf quick option. If you don't use quick option on rules, then it will be last matching rule applied, but if you you use quick option, the fir

Re: route-to doesnot work for me - what am i doing wrong

2008-10-14 Thread Stuart Henderson
> If you don't use quick option on rules, then it will be last matching rule > applied, but if you you use quick option, the first matching rule will be > applied, the rest will be ignored. So, if you use quick option the filter > order would be; picking just the "in...on $int_if" rules in o

Re: route-to doesnot work for me - what am i doing wrong

2008-10-14 Thread Charlie Clark
Hi Siju, isn't this: pass in quick on $int_if route-to ( $ext_if2 $ext_ifgw ) from to any keep state meant to be like this: pass in quick on $int_if route-to { ( $ext_if2 $ext_ifgw ) } from to any keep state Regards, Charlie Siju George wrote: Hi, I have firewall sk0 - LAN Interface

Re: route-to doesnot work for me - what am i doing wrong

2008-10-14 Thread Siju George
Thanks I figured it out. I missed the nat rule for $ext_if2 --Siju On Tue, Oct 14, 2008 at 1:03 PM, Siju George <[EMAIL PROTECTED]> wrote: > Hi, > > I have firewall > > sk0 - LAN Interface > rl1 - Primary internet connection > rl2 - secondary Internet connection > > I have a line in pf.conf > > p

Re: route-to doesnot work for me - what am i doing wrong

2008-10-15 Thread Siju George
On Tue, Oct 14, 2008 at 3:50 PM, Stuart Henderson <[EMAIL PROTECTED]> wrote: >>> pass in quick on $int_if route-to ( $ext_if2 $ext_ifgw ) from >>> to any keep state >>> >>> to route requests from hosts in through the rl2 internet >>> connection but it does not seem to work. > > you should route