Routing challenges with DHCP and static interfaces

Article View: bit.listserv.openbsd-pf

Article #233

Back to bit.listserv.openbsd-pf Previous Next

#233

From: gpontis
Date: Fri, 16 Nov 2012 08:05

21 lines
2247 bytes

I recently moved from OpenBSD 4.9 to 5.2, and onto a new machine with  
an extra enet port for the backup cable modem. DSL with a block of  
static IPs is the primary external interface. My plan was add rules  
with route-to to route specific traffic to the cable modem.

First thing, I can't seem to write a rule that will route anywhere  
other than to the default interface. For example, a rule such as "pass  
in quick on em0 from any to 1.2.3.4 keep state route-to ( em2  
$em2GatewayAddr )" should do it. But then "telnet 1.2.3.4" causes a  
packet to go out em1, which is the interface hosting the default  
route. "pfctl -vvs rules" does show the route-to rule as one would  
expect, and it is being evaluated, but no packets match. I can't see  
any reason for packets to not match.

A second problem is that the cable modem must get an address using  
DHCP. To route to the cable modem, I assume that route-to rules must  
contain the gateway address. But it is not clear how to get that from  
DHCP issued address into a rule. Is there a way to do it, or is my  
approach incorrect ?

George

Technical Details

Message-ID: <20121116003433.6oy5ec5x44o0ks88-tcbagvf@webmail.spamcop.net>

Path:

arc1-ca.pugleaf.net!ha8ni292480wib.1!nntp.google.com!feeder2.cambriumusenet.nl!feed.tweaknews.nl!209.197.12.246.MISMATCH!nx02.iad01.newshosting.com!newshosting.com!69.16.185.21.MISMATCH!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn

Show Full Headers

Complete Article Headers

X-Google-Thread: ff4ef,840cf672cc3914fa,start
X-Google-NewGroupId: yes
X-Google-Attributes: gidbffa70e3,domainid0,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
Received: by 10.180.81.198 with SMTP id c6mr792972wiy.2.1353053143557;
        Fri, 16 Nov 2012 00:05:43 -0800 (PST)
Path: arc1-ca.pugleaf.net!ha8ni292480wib.1!nntp.google.com!feeder2.cambriumusenet.nl!feed.tweaknews.nl!209.197.12.246.MISMATCH!nx02.iad01.newshosting.com!newshosting.com!69.16.185.21.MISMATCH!npeer03.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!spln!newsgate.newsguy.com!newsp.newsguy.com!mdrn
From: gpontis@spamcop.net
Newsgroups: bit.listserv.openbsd-pf
Subject: Routing challenges with DHCP and static interfaces
Date: 16 Nov 2012 00:05:42 -0800
Organization: None
Lines: 22
Message-ID: <20121116003433.6oy5ec5x44o0ks88-tcbagvf@webmail.spamcop.net>
NNTP-Posting-Host: 64-142-101-246.dsl.static.sonic.net
Mime-Version: 1.0
NNTP-Posting-Date: 16 Nov 2012 08:05:42 GMT
X-Received-Bytes: 1738
Content-Type: text/plain;
 charset=ISO-8859-1;
 DelSp="Yes";
 format="flowed"
Content-Transfer-Encoding: 8bit