Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Assign specific WAN based on L7 rule.

    Scheduled Pinned Locked Moved Routing and Multi WAN
    17 Posts 3 Posters 4.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      Cino
      last edited by

      It wont capture encrypted bittorrent traffic and i don't think it will capture trackers that use HTTP. But since your traffic will be using different gateways, it shouldnt be able to track if its using http

      1 Reply Last reply Reply Quote 0
      • A
        alkizmo
        last edited by

        Ok well I will see the result of that.
        Anyway incoming connections generated by the cable modem's IP being advertised on trackers will be refused as the port won't be forwarded on that side.

        1 Reply Last reply Reply Quote 0
        • M
          Metu69salemi
          last edited by

          If you're having only one client or minimum amount of torrent pc's then you can create rule that any trafic what those produce to internet is going to use opt1 gateway

          if you have multiple pc's it's lot easier to use ip alias to determine those, if ip's isn't chancing (dhcp static mappins)

          1 Reply Last reply Reply Quote 0
          • A
            alkizmo
            last edited by

            @Metu69salemi:

            If you're having only one client or minimum amount of torrent pc's then you can create rule that any trafic what those produce to internet is going to use opt1 gateway

            if you have multiple pc's it's lot easier to use ip alias to determine those, if ip's isn't chancing (dhcp static mappins)

            Ya I can't do that because the very same PC would be used for web browsing and web video streaming (as a client) and those would lag badly if Bittorrent is saturating the OPT1 connection. Unless Netflix and other web video streams are all on standard 443, 80,8080 ports.

            1 Reply Last reply Reply Quote 0
            • A
              alkizmo
              last edited by

              @Metu69salemi:

              Assign to lan
              pass tcp/udp from lan subnet to any
              advanced options Gateway optgateway and L7 filter

              make it above anything. reset states and should work

              OK I just did that.
              Now all my traffic goes through OPT1, not just bittorrent….

              1 Reply Last reply Reply Quote 0
              • M
                Metu69salemi
                last edited by

                What your L7 rule says?

                1 Reply Last reply Reply Quote 0
                • A
                  alkizmo
                  last edited by

                  My L7 rule

                  And my Firewall rule under LAN tab

                  When that firewall rule is enabled, suddenly everything on the computer 192.168.0.10 will go through OPT1 (opt1=dsl)

                  1 Reply Last reply Reply Quote 0
                  • M
                    Metu69salemi
                    last edited by

                    Your L7 says action block.

                    what did you want? block it or allow it?

                    1 Reply Last reply Reply Quote 0
                    • A
                      alkizmo
                      last edited by

                      @Metu69salemi:

                      Your L7 says action block.

                      what did you want? block it or allow it?

                      I want to allow it, but there are no other options other than block.
                      And if my option selection was supposed to BLOCK it, well… it doesn't block it because as I said, EVERYTHING (including bittorrent) is being redirected to the DSL connection with the firewall rule.

                      1 Reply Last reply Reply Quote 0
                      • M
                        Metu69salemi
                        last edited by

                        Interesting..

                        Maybe someone else may provide some more details/help on this case

                        1 Reply Last reply Reply Quote 0
                        • C
                          Cino
                          last edited by

                          Emarl would be the guru if its possible. Thinking a code change would be needed to allow a feature like this. Do you have access to all the clients running bit-torrent software? You could set static ports then create an alias to direct all that traffic thru the gw you want. Thats what I did for my network

                          1 Reply Last reply Reply Quote 0
                          • A
                            alkizmo
                            last edited by

                            @Cino:

                            Emarl would be the guru if its possible. Thinking a code change would be needed to allow a feature like this. Do you have access to all the clients running bit-torrent software? You could set static ports then create an alias to direct all that traffic thru the gw you want. Thats what I did for my network

                            Well that's what I'm doing now. I basically put the before-last-rule to be that ALL traffic of the bittorrent machine (192.168.0.10) be NATed to the DSL connection. Above that rule, I put that port 80,80,443 (and a few other ports) from 192.168.0.10 be sent to the cable connection.

                            So far it works ok, but the problem is with the trackers running on HTTP will be contacted by my cable connection. So getting incoming connections on my DSL for bittorrent is a bit slow, as the DHT and peer-sharing functions need to kick in for my DSL connection to be known to the other peers.

                            but it works none the less and maybe I'll leave it like that since I don't want to take the chance that L7 layer filtering (if I'd get it to work) would fail one day and reship everything to the cable connection, costing me a pretty penny in overages.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.