Thread View: bit.listserv.openbsd-pf
1 messages
1 total messages
Started by Nickolay Orekhov
Tue, 12 Mar 2013 09:03
(none)
Author: Nickolay Orekhov
Date: Tue, 12 Mar 2013 09:03
Date: Tue, 12 Mar 2013 09:03
89 lines
5822 bytes
5822 bytes
--047d7b3438ecf6fb2904d7b645ba Content-Type: text/plain; charset=ISO-8859-1 Hello, All! I want to make the following scheme for two ethernet adapters: en1 address 10.1.1.29, gateway of 10.1.1.252 en2 address 10.2.1.29, gateway of 10.2.1.252 Incoming connections, coming from gateways shoud create state and be answered to the same gateway. This can be achieved with: pass in quick on en1 reply-to (en1 10.1.1.252) keep state pass in quick on en2 reply-to (en2 10.2.1.252) keep state That works ok. The problem is with outgoing connections. I want to duplicate packets going to en1 ( if 10.1.1.252 will be set as default gateway ) until an answer will come from either en1 or en2. Then I want to create NAT state and convert packets coming to 10.2.1.29 to 10.1.1.29 to match desired connetion. Can It be achieved with packet filter? Regards,Nickolay P.S. I have a QNX and rather old version of packet filter without "nat-to" rules. *spamassassinexception* --047d7b3438ecf6fb2904d7b645ba Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <span style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:1= 3px;background-color:rgb(255,255,255)">Hello, All!</span><div style=3D"colo= r:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-colo= r:rgb(255,255,255)"> <br></div><div style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;fo= nt-size:13px;background-color:rgb(255,255,255)">I want to make the followin= g scheme for two ethernet adapters:</div><div style=3D"color:rgb(34,34,34);= font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,25= 5)"> en1 address 10.1.1.29, gateway of 10.1.1.252</div><div style=3D"color:rgb(3= 4,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(2= 55,255,255)">en2 address 10.2.1.29, gateway of 10.2.1.252</div><div style= =3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;backgro= und-color:rgb(255,255,255)"> <br></div><div style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;fo= nt-size:13px;background-color:rgb(255,255,255)">Incoming connections, comin= g from gateways shoud create state and be answered to the same gateway.</di= v> <div style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13= px;background-color:rgb(255,255,255)">This can be achieved with:</div><div = style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;ba= ckground-color:rgb(255,255,255)"> <div><br></div><div>pass in quick on en1 reply-to (en1 10.1.1.252) keep sta= te</div><div>pass in quick on en2 reply-to (en2 10.2.1.252) keep state</div= ></div><div style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-= size:13px;background-color:rgb(255,255,255)"> <br></div><div style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;fo= nt-size:13px;background-color:rgb(255,255,255)">That works ok. The problem = is with outgoing connections.</div><div style=3D"color:rgb(34,34,34);font-f= amily:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"> I want to duplicate packets going to en1 ( if 10.1.1.252 will be set as def= ault gateway ) until an answer will come from either en1 or en2.</div><div = style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;ba= ckground-color:rgb(255,255,255)"> Then I want to create NAT state and convert packets coming to 10.2.1.29 to = 10.1.1.29 to match desired connetion.</div><div style=3D"color:rgb(34,34,34= );font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,= 255)"> <br></div><div style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;fo= nt-size:13px;background-color:rgb(255,255,255)">Can It be achieved with pac= ket filter?</div><div style=3D"color:rgb(34,34,34);font-family:arial,sans-s= erif;font-size:13px;background-color:rgb(255,255,255)"> <br></div><div style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;fo= nt-size:13px;background-color:rgb(255,255,255)">Regards,Nickolay</div><div = style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;ba= ckground-color:rgb(255,255,255)"> P.S. I have a QNX and rather old version of packet filter without "nat= -to" rules.</div><div style=3D"color:rgb(34,34,34);font-family:arial,s= ans-serif;font-size:13px;background-color:rgb(255,255,255)"><br></div><div = style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;ba= ckground-color:rgb(255,255,255)"> <i style=3D"color:rgb(0,0,0);font-family:'Times New Roman';font-siz= e:medium;background-color:rgb(240,240,255)">spamassassinexception</i></div> --047d7b3438ecf6fb2904d7b645ba--
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads