RE: PF load balancing again...

2006-02-27 Thread Jose Mejia
>Down rule will work if your default gateway is on $ext_if >pass out quick on $ext_if route-to ($ext_if2 $ext_gw2) from any to any port www keep state probability 50% It doesn't work either, I didn't debug it, but it seems packets going out from ext_if2 are coming back to ext_if 1 too The de

RE: PF load balancing again...

2006-02-27 Thread Jose Mejia
Hi Tihomir...thks for the response I think SQUID is running fine, my default gw is ext_if, I was playing with multipath too without results.the conf file is really in disorder due to the try-out and continous changes, I'm sorry Now I'm not with the machine, but tomorrow I'll post

PF load balancing again...

2006-02-25 Thread Jose Mejia
Hi all here we go again with that matter : We've a firewall with 4 interfaces (2 outside to two differents routers and ISPs,1 inside and 1 DMZ),the machine is running a Squid web proxy too, we wanna make balancing on outgoing connections only for the web traffic, we have get to do that, and now t

RE: PF load balancing

2006-02-13 Thread Jose Mejia
Hi Stevethat's the problem, maybe the NAT rules are not right, (i've tried with others without result) but i think the key is in the stateful inspection...or maybe all the idea is not well configured Greetings Jose M >> Hi all : >> >> We've a firewall with 4 interfaces (2 outsid

PF load balancing

2006-02-13 Thread Jose Mejia
Hi all : We've a firewall with 4 interfaces (2 outside to two differents routers and ISP,1 inside and 1 DMZ),the machine is running a Squid web proxy too, we wanna make balancing on outgoing connections only for the web traffic, we have get to do that, and now the packets are going out on ext_if

RV: Load balancing with round-robind and DMZ

2005-07-10 Thread Jose Mejia
Dear friends : I need to balance the output in a OpenBSD 3.6 box , I have 2 output interfaces with 2 gateways and 2 IP's, and I want to balance the output with an easy "round-robin" style with "route-to".The problem is that I have in the same firewall/gateway a DMZ, so every traffic destined (a