Using Action: Match for Gateway

[artooro]

I would like to be able to assign a gateway without specifying whether the traffic is passed or blocked.

So I tried creating a floating rule with the action of Match and it appears that doing so doesn't even create the "route-to" part. To confirm I ran the command pfctl -s rules and the gateway (route-to) setting doesn't even appear when using Match.

Is this a bug in pfSense, or is there truly no way to do what I'm attempting here.

[jimp]

The match action is primarily for traffic shaping/queuing and won't do what you want.

You can only use a gateway on pass rules, so it really only makes sense to assign a gateway when allowing traffic into the firewall in nearly all cases.

What is it that you believe will be easier to accomplish using this kind of technique?

[artooro]

Ok thanks for the clarification. I just wanted to keep things simpler, and only have to set/manage that rule in one place instead of for each pass rule.