IPfilter
[Top] [All Lists]

Policy Routing, and Passing or Blocking when using 'to'.

To: ipfilter@coombs.anu.edu.au
Subject: Policy Routing, and Passing or Blocking when using 'to'.
From: "Michael Gorsuch" <michael.gorsuch@gmail.com>
Date: Tue, 9 Jan 2007 17:21:35 -0500
Delivered-to: sp-com-lists@consult.net
Delivered-to: ipfilter-list@securepoint.com
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=OeeT+IANVStWYuj/lRO2VMjiEipGQ/L1gkdV82QGYhU+h/xHODDIMbLfy/2k82pV8Fw59l1nPfG4w5sbpT5eV9DaCO7je8vwTNp+gATm6qMhhfzqo6v2JwCAEOse9g6AKNnlc//1R1j5mjvDIG4dyCmMdgCDfPBjiJrhDa8xXR0=
Sender: owner-ipfilter@coombs.anu.edu.au
I working on a policy routing setup to send certain host traffic out
to the internet over a specific interface.

Which of these is the correct method to pass the traffic?

pass  out quick on xl0 out to xl1:1.2.3.4 from 2.2.2.2 to any
block out quick on xl0 out to xl1:1.2.3.4 from 2.2.2.2 to any

In this example, 1.2.3.4 is the next hop for xl1, and 2.2.2.2 is the
host inside my network.

I have seen what seems to be a contradiction in opinions on this
topic, and really want to understand it better before I start
deploying this.

Thanks,

Michael Gorsuch

<Prev in Thread] Current Thread [Next in Thread>
  • Policy Routing, and Passing or Blocking when using 'to'., Michael Gorsuch <=