<![CDATA[Specify Netmask rather than CIDR]]>Hi all,
I want to load-balance two WAN links, based on destination IP (even or odd). Example.

10.10.10.1 -> WAN1
10.10.10.2 -> WAN2

I can specify similar in normal FreeBSD IPFW using 0.0.0.1 or 0.0.0.2.  But pfsense only allow /28 type netmask.

So, anyone know how I can do it ?

]]>https://forum.netgate.com/topic/5612/specify-netmask-rather-than-cidrRSS for NodeSun, 06 Sep 2026 09:03:33 GMTMon, 27 Aug 2007 17:23:12 GMT60<![CDATA[Reply to Specify Netmask rather than CIDR on Tue, 28 Aug 2007 19:14:56 GMT]]>This will not work in pfSense.

]]>https://forum.netgate.com/post/159105https://forum.netgate.com/post/159105Tue, 28 Aug 2007 19:14:56 GMT<![CDATA[Reply to Specify Netmask rather than CIDR on Tue, 28 Aug 2007 18:54:43 GMT]]>sorry for the confusion. I wrongly mention .2.

Previously, I try on FreeBSD, with rc.firewall & PF work together and achieve policy routing & NAT

the idea is to have traffic to

  • odd destination IP, go into one WAN link (odd destination IP, like 10.10.1.1)
  • even destination IP, go into another link (even destination IP, like 10.10.1.2)

I remember something similar to below in configure file:
fwd 0.0.0.0 0.0.0.1 Wan1Gateway -> packet to WAN1 link
fwd 0.0.0.1 0.0.0.1 Wan2Gateway -> packet to WAN2 link
{Sorry, exact syntax I need to double check}

]]>https://forum.netgate.com/post/159101https://forum.netgate.com/post/159101Tue, 28 Aug 2007 18:54:43 GMT<![CDATA[Reply to Specify Netmask rather than CIDR on Tue, 28 Aug 2007 18:27:43 GMT]]>@tim:

yes, but having netmask 0.0.0.1 can't convert to CIDR :-(  which is the only input method on pfsense.

The problem is that 0.0.0.1 is not a netmask. I thought you might be talking about an inverse netmask, but 0.0.0.2 isn't even a valid inverse netmask. Anyway, I don't think ipfw uses inverse wildcarding. I've only seen it on Cisco IOS devices…

]]>https://forum.netgate.com/post/159099https://forum.netgate.com/post/159099Tue, 28 Aug 2007 18:27:43 GMT<![CDATA[Reply to Specify Netmask rather than CIDR on Tue, 28 Aug 2007 16:10:14 GMT]]>What exactly are you looking for in terms of hosts?  1 host only?

]]>https://forum.netgate.com/post/159092https://forum.netgate.com/post/159092Tue, 28 Aug 2007 16:10:14 GMT<![CDATA[Reply to Specify Netmask rather than CIDR on Tue, 28 Aug 2007 12:39:01 GMT]]>yes, but having netmask 0.0.0.1 can't convert to CIDR :-(  which is the only input method on pfsense.

@sai:

google says that http://www.tech-faq.com/convert-netmask-to-cidr.shtml is a good place to look

]]>https://forum.netgate.com/post/159088https://forum.netgate.com/post/159088Tue, 28 Aug 2007 12:39:01 GMT<![CDATA[Reply to Specify Netmask rather than CIDR on Tue, 28 Aug 2007 05:37:38 GMT]]>google says that http://www.tech-faq.com/convert-netmask-to-cidr.shtml is a good place to look

]]>https://forum.netgate.com/post/159080https://forum.netgate.com/post/159080Tue, 28 Aug 2007 05:37:38 GMT