Set default gateway based on protocol using pfSense

pfsensepolicy-routingsmtp

I have a pfSense configured with two Internet links for broadband load balancing.

One of these links block outgoing traffic on 25 port (WAN1). I have a mail server (IP 10.6.9.2) that should use the gateway of the internet without blocking (WAN2) when the destination port is 25 (SMTP).

We can do this setup with pfSense?

Best Answer

It seems that you've figured this out already, but the way to do that is through firewall rules with a specific gateway chosen. In pfSense and in general, this is called Policy Based Routing or Policy Routing, so try searching for those terms if you have specific issues.

Related Solutions

Router – Best way to split LAN computers on two WANs (not load balancing)

We've done this before in PFSense.

If your IP addresses are grouped together it's easier, otherwise you have to create a rule for each and every IP address.

In the WAN Firewall rules, create a rule matching:

Protocol: any
Source: x.x.x.x (or a range, if appropriate)
Destination: any
Gateway: (select WAN connection)

You might want to create two failover groups (WAN1->WAN2, and WAN2->WAN1) so that if one WAN goes down it will failover to the other WAN, but won't use it otherwise (if this is appropriate)

PfSense with two WANs, routing Skype traffic over a specific WAN

From what I understand, the only traffic shaping library that successfully classifies Skype traffic is nDPI which is included with nTop. http://www.ntop.org/products/ndpi/

How can this interface with pfSense? I'm not sure, but they're both open-source projects, so perhaps you can convince one to work with the other through a bounty!

Best Answer

Related Solutions

Router – Best way to split LAN computers on two WANs (not load balancing)

PfSense with two WANs, routing Skype traffic over a specific WAN

Related Topic