How to open 443 and 80 port through a specific interface?

Question

FreeBSD

Hello!

Tell me, please, who than can. The bottom line is this:
there is a gateway. 2 routers are connected to it to different interfaces: Router-1 and Router-2.

I want users who go through the gateway and open port 443 or 80 to go through Router-2 (bge1 interface)

here is a piece of the ipfw rule:

ipfw -q add 00041 allow tcp from 192.168.1.1/24 to any 80 out via bge1
ipfw -q add 00041 allow tcp from any to 192.168.1.1/24 80 in via bge1
ipfw -q add 00042 allow tcp from 192.168.1.1/24 to any 443 out via bge1
ipfw -q add 00042 allow tcp from any to 192.168.1.1/24 443 in via bge1

Applied rules - but does not work. I go to 2ip.ru - all the same, IP shows the wrong network interface.

Help me to understand.

Answer 1

This is how you _allow_ traffic to pass through the specified interface, rather than directing traffic to the correct interface.
The command "iptables -A FORWARD -s 192.168.1.0/24 -m multiport --dports 80,443 -j SNAT --to [IP-address bge1] " will help.
Remove this setting with the command: "iptables -D FORWARD -s 192.168.1.0/24 -m multiport --dports 80,443".