[Linux-Biella] routing o non routing

[leonardo 'LeOS' buffa]

On Thu, 30 Nov 2006 18:16:03 +0100
leonardo 'LeOS' buffa <leos a bilug.linux.it> wrote:


> sisisi pure io ricordavo qualcosa, l'avevo usato per fare un lb, ora
> dovrei cavarmela :)

ed ecco la soluzione:

#nat on $ext_if1 from $pxy -> $ext_ip1
nat on $ext_if2 from $pxy -> $ext_ip2

# da PROXY a fuori
#pass in on $pxy_if proto tcp from $pxy to any keep
state 

#pass in on $pxy_if proto { udp, icmp } from $pxy to any keep
state

pass in on $pxy_if route-to ( $ext_if2 $router2 ) proto tcp from
$pxy to any keep state

pass in on $pxy_if route-to ( $ext_if2 $router2 ) proto {udp icmp} from
$pxy to any keep state


grazie per le dritte :)


-- 
leonardo 'LeOS' buffa
IT security consultant
------------------------------
Linux Registered User: #135079
------------------------------