Re: route-to round-robin using single interface?

Article View: bit.listserv.openbsd-pf

Article #153

Back to bit.listserv.openbsd-pf Previous Next

#153

From: Johan Helsingius
Date: Tue, 15 Jan 2013 13:01

29 lines
2049 bytes

Thanks for the reply, Daniel!

> AFAIK, it should work.

Good to have that confirmed, thanks!

> Can you ping $isp1_gw and $isp2_gw and arp -sn is showing two
> different entries for them?

>From the firewall machine, yes, but not from machines on
the internal network.

> What is the problem? All packets always go to $isp1_gw's MAC?

Seems packets just disappear. Might be that the return
packets don't make it back - will have to set up a
separate test system, as I can't fiddle with the
firewall during daytime.

> Are you using multiple clients on $int_net? 

Yes.

> Have you tried adding "keep state(soure-track global)" and
> "set timeout source-track" and checked with pfctl -sS?

No, hadn't thought about that. Thanks - will have to try.

	Julf

Technical Details

Message-ID: <50F54744.5050406@julf.com>

Path:

arc1-ca.pugleaf.net!o9ni8494wio.1!nntp.google.com!feeder1.cambriumusenet.nl!feed.tweaknews.nl!193.141.40.65.MISMATCH!npeer.de.kpn-eurorings.net!npeer-ng0.de.kpn-eurorings.net!border2.nntp.ams2.giganews.com!border4.nntp.ams.giganews.com!border2.nntp.ams.giganews.com!nntp.giganews.com!news.nobody.at!news.glorb.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn

References: <50F4167D.1080403@Julf.com> <20130115120107.GD2410@insomnia.benzedrine.cx>

Show Full Headers

Complete Article Headers

X-Google-Thread: bffa70e3,3bf4827c7d36c008
X-Google-Attributes: gidbffa70e3,public,usenet
X-Google-NewGroupId: yes
X-Google-Language: ENGLISH,ASCII-7-bit
X-Received: by 10.180.100.74 with SMTP id ew10mr1718436wib.7.1358657406930;
        Sat, 19 Jan 2013 20:50:06 -0800 (PST)
Path: arc1-ca.pugleaf.net!o9ni8494wio.1!nntp.google.com!feeder1.cambriumusenet.nl!feed.tweaknews.nl!193.141.40.65.MISMATCH!npeer.de.kpn-eurorings.net!npeer-ng0.de.kpn-eurorings.net!border2.nntp.ams2.giganews.com!border4.nntp.ams.giganews.com!border2.nntp.ams.giganews.com!nntp.giganews.com!news.nobody.at!news.glorb.com!npeer02.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: julf@julf.com (Johan Helsingius)
Newsgroups: bit.listserv.openbsd-pf
Subject: Re: route-to round-robin using single interface?
Date: 15 Jan 2013 05:01:31 -0800
Organization: None
Lines: 29
Message-ID: <50F54744.5050406@julf.com>
References: <50F4167D.1080403@Julf.com> <20130115120107.GD2410@insomnia.benzedrine.cx>
NNTP-Posting-Host: [172.24.42.146]
Mime-Version: 1.0
NNTP-Posting-Date: 15 Jan 2013 13:01:31 GMT
X-Received-Bytes: 1408
Bytes: 1586
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Reply to Parent Message