OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Checking Routes/Gateways For Good Connection

From: David Gwynne (lokianimata.net)
Date: Wed Aug 25 2010 - 19:32:51 CDT


relayd can do this i think.

On 26/08/2010, at 9:10 AM, dontek wrote:

> Jacob Yocom-Piatt wrote:
>> Don Tek wrote:
>>> I've recently implemented a firewall with two internet connections
>>> using multipath routing and round-robin outbound load balancing.
>>>
>>> I am looking for a solution from the shell to detect failure of these
>>> two internet gateways so I can force routing and pf changes from a
>>> script.
>>>
>>> I need something more robust than simply checking to see if the
>>> interface is up or down.
>>>
>>> I have managed a solution using traceroute that allows me to
>>> accomplish half of my goal. I can detect a failure and "down" that
>>> route, however, once I delete the default route from the routing table
>>> for the failed connection, I can no longer test it with traceroute.
>>> This is because it doesn't appear to me that OpenBSD's traceroute
>>> allows forcing an interface to work on.
>>>
>>> I am looking for better solutions from some of you more experienced
>>> users. Any suggestions are welcome.
>>
>> ifstated
>
>
> As stated, I need something more robust than simple link state testing. I
> realize ifstated can utilize external tests, an example of an one of these
> external tests is what I'm looking for.