openbsd下策略路由的实现.

testab

从IP地址A.A.A.A到另一个地址B.B.B.B的下一条路由地址C.C.C.C
linux下有ip route2 实现 ;在openbsd下应该这样实现


pass out log on em0 route-to (em0 C.C.C.C) inet from A.A.A.A to B.B.B.B flags S/SA keep state
即可.




ROUTING
     If a packet matches a rule with a route option set, the packet filter
     will route the packet according to the type of route option.  When such a
     rule creates state, the route option is also applied to all packets
     matching the same connection.
     fastroute
           The fastroute option does a normal route lookup to find the next
           hop for the packet.
     route-to
           The route-to option routes the packet to the specified interface
           with an optional address for the next hop.  When a route-to rule
           creates state, only packets that pass in the same direction as the
           filter rule specifies will be routed in this way.  Packets passing
           in the opposite direction (replies) are not affected and are routed
           normally.
     reply-to
           The reply-to option is similar to route-to, but routes packets that
           pass in the opposite direction (replies) to the specified inter-
           face.  Opposite direction is only defined in the context of a state
           entry, and reply-to is useful only in rules that create state.  It
           can be used on systems with multiple external connections to route
           all outgoing packets of a connection through the interface the in-
           coming connection arrived through (symmetric routing enforcement).
     dup-to
           The dup-to option creates a duplicate of the packet and routes it
           like route-to.  The original packet gets routed as it normally
           would.



本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/21125/showart_1895419.html