From nobody@FreeBSD.org  Wed Jul 25 10:12:30 2007
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 6356616A46D
	for <freebsd-gnats-submit@FreeBSD.org>; Wed, 25 Jul 2007 10:12:30 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (unknown [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id 4F28813C457
	for <freebsd-gnats-submit@FreeBSD.org>; Wed, 25 Jul 2007 10:12:30 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.1/8.14.1) with ESMTP id l6PACTbj010075
	for <freebsd-gnats-submit@FreeBSD.org>; Wed, 25 Jul 2007 10:12:29 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.1/8.14.1/Submit) id l6PACTgc010074;
	Wed, 25 Jul 2007 10:12:29 GMT
	(envelope-from nobody)
Message-Id: <200707251012.l6PACTgc010074@www.freebsd.org>
Date: Wed, 25 Jul 2007 10:12:29 GMT
From: Narek <ngharibyan@mail.ru>
To: freebsd-gnats-submit@FreeBSD.org
Subject: Policy Based Routing Problem (ipfw fwd)
X-Send-Pr-Version: www-3.0

>Number:         114891
>Category:       i386
>Synopsis:       Policy Based Routing Problem (ipfw fwd)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-i386
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Wed Jul 25 10:20:01 GMT 2007
>Closed-Date:    Thu Jul 26 09:00:39 GMT 2007
>Last-Modified:  Thu Jul 26 09:00:39 GMT 2007
>Originator:     Narek
>Release:        6.2 RELEASE
>Organization:
SIS
>Environment:
P4 2000 512MB RAM
Named, gateway,SSH, Snmp, Firewall (ipfw)
>Description:
I have a firewall/router with FreeBSD 6.2 installed on it. 2 ISP connection and 2 LAN connections. I need to do a policy-based routing. All I need that packets coming from one ISP interface return to that interface (incoming connections source based routing) and the other hand do a IP based routing from the LAN (Some packets will goes out via ISP 1 some others via ISP 2 depending on IPs requested). I tried to do that with ipfw fwd but it didnt work any way (e.g. with ip.forwarding enabled or no). Even I've disabled my static routes, default gw. Just it do nothing. Sample configs are 

ipfw add fwd ISP_gw from ${my lan} to any via ${eif} 
ipfw add fwd ISP_gw from ${my lan} to any out via ${eif} 
ipfw add fwd ISP_gw from any to any xmit ${eif}

I dont use nat, proxy. Just need to route. 
>How-To-Repeat:
always
>Fix:


>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: remko 
State-Changed-When: Thu Jul 26 09:00:38 UTC 2007 
State-Changed-Why:  
Please ask general support questions on the various mailinglists. In 
this case the ipfw@ mailinglist seems to be appropriate. Please checkout 
http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw/ for more 
information regarding that mailinglist. Thanks for using FreeBSD. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=114891 
>Unformatted:
