tagging traffic on Windows and route it on pfsense
-
Is it possible to tag traffic from a Windows application (a process) and route that traffic based on that tag in pfsense?
Currently I'm doing packet dumps and netstat and whatnot, to figure out which application talks to which servers that I need to route to a certain gateway. This is cumbersome and often has me cutting corners and (temporarily) route all traffic from that pc's ip to that gateway.
If I can simply tell a firewall tool or something to tag packets from process bla.exe and if I can tell pfsense to send all packets with that tag to the right gateway that would be so much easier.
Thanks!
-
you could set the application or windows to set a dscp flag (qos)... This might help
https://docs.microsoft.com/en-us/windows-server/networking/technologies/qos/qos-policy-top
-
Thanks.
So, by pointing to QoS you mean to say that what I'm asking is not possible?
-
No what I saying is that is how you could flag traffic in windows. Then you should be able to route that traffic with whatever specific marker you put.
There is no other way I know of to tag or mark traffic coming from a specific application other than with dcsp.
You can route traffic in pfsense really easy based upon source IP, source port, Dest port, dest IP, etc. And then you can tag that traffic for other rules to process, etc. But that is not what you asked - you asked per application how to mark the traffic.
So for example you could part traffic that is coming from your browser with af11, and traffic coming from say application XYZ with af12.. Then you could tag traffic coming from IP of your box with af11 as browser, and traffic with af12 as application and then route it based on those tags i pfsense rules.
This way even if going to the same dest IP, you could could tell what is browser traffic and what is application traffic.
-
This post is deleted!
