i386/114891: Policy Based Routing Problem (ipfw fwd)

Narek ngharibyan at mail.ru
Wed Jul 25 10:20:02 UTC 2007


>Number:         114891
>Category:       i386
>Synopsis:       Policy Based Routing Problem (ipfw fwd)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-i386
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Wed Jul 25 10:20:01 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator:     Narek
>Release:        6.2 RELEASE
>Organization:
SIS
>Environment:
P4 2000 512MB RAM
Named, gateway,SSH, Snmp, Firewall (ipfw)
>Description:
I have a firewall/router with FreeBSD 6.2 installed on it. 2 ISP connection and 2 LAN connections. I need to do a policy-based routing. All I need that packets coming from one ISP interface return to that interface (incoming connections’ source based routing) and the other hand do a IP based routing from the LAN (Some packets will goes out via ISP 1 some others via ISP 2 depending on IPs requested). I tried to do that with ipfw fwd but it didn’t work any way (e.g. with ip.forwarding enabled or no). Even I've disabled my static routes, default gw. Just it do nothing. Sample configs are 

ipfw add fwd ISP_gw from ${my lan} to any via ${eif} 
ipfw add fwd ISP_gw from ${my lan} to any out via ${eif} 
ipfw add fwd ISP_gw from any to any xmit ${eif}

I don’t use nat, proxy. Just need to route. 
>How-To-Repeat:
always
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-i386 mailing list