одна подсеть должна отправлять и получать пакеты в И-нет через интерфейс rl0
другая подсеть через rl1
проблема в том. что составив следующие правила:
$R_if="tun0"
$S_if="tun1"
lan_if="sk1"
R_addr="90.XXX.XXX.XXX"
S_addr="91.XXX.XXX.XXX"
lan_net="192.168.1.128/25"
dmz_net="192.168.1.0/25"
nat on $R_if from $lan_net to any -> ($R_if)
nat on $S_if from $dmz_net to any -> ($S_if)
block in all
block out all
pass out on "lan_if" from any to "lan_net"
pass out on "lan_if" from any to "dmz_net"
pass in quick on $lan_if from $lan_net to $lan_if
pass in quick on $lan_if from $dmz_net to $lan_if
pass in on $lan_if route-to {($R_if $R_addr)} proto tcp from $lan_net to any flags S/SA modulate state
pass in on $lan_if route-to {($R_if $R_addr)} proto {udp, icmp} from $lan_net to any keep state
pass in on $lan_if route-to {($S_if $S_addr)} proto tcp from $dmz_net to any flags S/SA modulate state
pass in on $lan_if route-to {($S_if $S_addr)} proto {udp, icmp} from $dmz_net to any keep state
pass out on $R_if proto tcp from any to any flags S/SA modulate state
pass out on $R_if proto {tcp, icmp} from any to any keep state
pass out on $S_if proto tcp from any to any flags S/SA modulate state
pass out on $S_if proto {tcp, icmp} from any to any keep state
pass out on $R_if route-to ($R_if $R_addr) from $R_if to any
pass out on $S_if route-to ($S_if $S_addr) from $S_if to any
и
route add -net 192.168.1.0 -netmask 255.255.255.128 90.X.X.X
route add -net 192.168.1.128.0 -netmask 255.255.255.128 91.X.X.X
пакеты с обоих подсетей все равно стремятся только в tun0 или tun1
Кто-нибудь сталкивался?
