multihome network

alexus alexus at gmail.com
Sun Nov 18 20:04:10 PST 2007


how i can acomplish this with ipf? i have ipf on that box

On Nov 16, 2007 4:45 PM, Todor Dragnev <todor.dragnev at gmail.com> wrote:
> Hi,
>
> you must use advanced routing, this is very easy on linux with
> iproute2 but freebsd is far away for now(maybe forever) and you must
> use pf or ipf for this situation.
>
> So, enable pf in rc.conf
>   pf_enable="YES"
>
> Add this line to the end of pf.conf:
>   pass out quick route-to (fxp1 $fxp1_gw) inet from $fxp1_ip to !
> $fxp1_ip keep state
>
> Where $fxp1_gw must be your gateway on fxp1 interface and $fxp1_ip is
> your IP address on fxp1.
> Keep your default gateway via 192.168.1.1. With these settings you
> can access both 192.168.1.1 and $fxp1_ip from outside.
>
> Regards,
> Todor Dragnev
>
>
> On 16.11.2007, at 07:18, alexus wrote:
>
> > Hello,
> >
> > I have two NICs on my box, one (primary) connected to switch and have
> > private IP. that IP also have a static route on Cisco PIX for
> > accessing this box from outside. the other interface has public IP
> > that is connected to another switch, i configure both IPs through
> > /etc/rc.conf, but I can not for some reason access my box through that
> > public IP, no firewall rules would prevent me from doing so. here is
> > my output for netstat -rn
> >
> > alexus# netstat -rn
> > Routing tables
> >
> > Internet:
> > Destination        Gateway            Flags    Refs      Use  Netif
> > Expire
> > default            192.168.1.1        UGS         0      250   fxp0
> > 127.0.0.1          127.0.0.1          UH          0        2    lo0
> > 192.168.1          link#1             UC          0        0   fxp0
> > 192.168.1.1        00:0d:29:09:90:61  UHLW        2        2
> > fxp0   1171
> > 192.168.1.250      00:16:cb:94:10:e9  UHLW        1       12
> > fxp0   1169
> > 216.112.241.24/29  link#2             UC          0        0   fxp1
> >
> > Internet6:
> > Destination                       Gateway                       Flags
> >     Netif Expire
> > ::1                               ::1
> > UHL         lo0
> > fe80::%lo0/64                     fe80::1%lo0
> > U           lo0
> > fe80::1%lo0                       link#4
> > UHL         lo0
> > ff01:4::/32                       fe80::1%lo0
> > UC          lo0
> > ff02::%lo0/32                     fe80::1%lo0
> > UC          lo0
> > alexus#
> >
> > what am I missing?
> >
> > --
> > http://alexus.org/
>
> > _______________________________________________
> > freebsd-questions at freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> > To unsubscribe, send any mail to "freebsd-questions-
> > unsubscribe at freebsd.org"
>
>



-- 
http://alexus.org/


More information about the freebsd-questions mailing list