Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    tagging traffic on Windows and route it on pfsense

    General pfSense Questions
    3
    5
    242
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      securvark last edited by

      Is it possible to tag traffic from a Windows application (a process) and route that traffic based on that tag in pfsense?

      Currently I'm doing packet dumps and netstat and whatnot, to figure out which application talks to which servers that I need to route to a certain gateway. This is cumbersome and often has me cutting corners and (temporarily) route all traffic from that pc's ip to that gateway.

      If I can simply tell a firewall tool or something to tag packets from process bla.exe and if I can tell pfsense to send all packets with that tag to the right gateway that would be so much easier.

      Thanks!

      1 Reply Last reply Reply Quote 0
      • johnpoz
        johnpoz LAYER 8 Global Moderator last edited by

        you could set the application or windows to set a dscp flag (qos)... This might help

        https://docs.microsoft.com/en-us/windows-server/networking/technologies/qos/qos-policy-top

        S 1 Reply Last reply Reply Quote 1
        • S
          securvark @johnpoz last edited by

          Thanks.

          So, by pointing to QoS you mean to say that what I'm asking is not possible?

          1 Reply Last reply Reply Quote 0
          • johnpoz
            johnpoz LAYER 8 Global Moderator last edited by johnpoz

            No what I saying is that is how you could flag traffic in windows. Then you should be able to route that traffic with whatever specific marker you put.

            There is no other way I know of to tag or mark traffic coming from a specific application other than with dcsp.

            You can route traffic in pfsense really easy based upon source IP, source port, Dest port, dest IP, etc. And then you can tag that traffic for other rules to process, etc. But that is not what you asked - you asked per application how to mark the traffic.

            So for example you could part traffic that is coming from your browser with af11, and traffic coming from say application XYZ with af12.. Then you could tag traffic coming from IP of your box with af11 as browser, and traffic with af12 as application and then route it based on those tags i pfsense rules.

            This way even if going to the same dest IP, you could could tell what is browser traffic and what is application traffic.

            1 Reply Last reply Reply Quote 0
            • J
              jennywilliams last edited by

              This post is deleted!
              1 Reply Last reply Reply Quote 0
              • First post
                Last post

              Products

              • Platform Overview
              • TNSR
              • pfSense
              • Appliances

              Services

              • Training
              • Professional Services

              Support

              • Subscription Plans
              • Contact Support
              • Product Lifecycle
              • Documentation

              News

              • Media Coverage
              • Press
              • Events

              Resources

              • Blog
              • FAQ
              • Find a Partner
              • Resource Library
              • Security Information

              Company

              • About Us
              • Careers
              • Partners
              • Contact Us
              • Legal
              Our Mission

              We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

              Subscribe to our Newsletter

              Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

              © 2021 Rubicon Communications, LLC | Privacy Policy