PF PF RDR and FIBS

Hi I'm trying to redirect all traffic from multiple interfaces in different FIB's to a single FIB and onto a different ip.

I was able to do this in openbsd but since switching to FreeBSD have not been able to get this working.


eg.

normal interface
fib0

vlan 1
fib1

vlan 2
fib2

vlan 3
fib3

example rule:
pass in quick on any proto tcp to any port {49,123} rdr-to 10.200.0.12 rtable 0
 
So I've managed to get traffic to traverse from the one FIB to the other, but the return traffic never seams to be able to move back from FIB 0 to FIB 2 per example below. Should PF not be able to manage the state table to determine that traffic should return back to the source FIB?

rule used:

rdr pass inet proto tcp from any to any port 49 rtable 0 -> 10.200.0.13 port 49

In Open BSD with the rdr-to , traffic used to return to the originating FIB/Rtable.

1639034982950.png
 
Back
Top