URL filter active on one WAN only with dual-WAN setup
-
Hi all,
Does anybody know how to enable a URL-filter that is active over one WAN-link only in a dual-WAN setup?
The reason I'd like to do this is that one WAN-link is a high-cost satellite link were one pays per kilobit and therefore we need to restrict the allowed traffic here down to a handful URLs.
Any idea is welcome :-)
-
If the special sites are ones that have quite well-defined IP address(es) (i.e. they are not huge pools of rotating IPs like FaceBook…) then Aliases should work.
Say you have WAN and SAT links, and you want some special things to fail over to SAT when WAN is down, then make a gateway group, FailoverToSAT, WAN = Tier 1, SAT = Tier 2.
Make an Alias SpecialSites with the names of the sites you want to fail over (myspecial.mailserver.com importantsite.com pfsense.org ...)
At the top of your LAN rules, put a rule: Pass, IPv4, protocol any, source LANnet, destination SpecialSites, gateway FailoverToSAT.