Routing certain sites (like banking) over multi-WAN?

[DrJohnZoidberg]

I have a few issues with sites that don't work nicely with our Pfsense multiwan setup at the office. When accessing Absas internet banking for instance you can log in but as soon as you click to a new page it logs you off.

Most sites I can force through a certain gateway by using simple firewall rules but the banking sites are probably using some sort of load balancing and resolve to different IPs sometimes which I cannot lock down.

For instance I have tried to route ib.absa.co.za through the one WAN but it doesn't seem to work because ib.absa.co.za only returns one host.

Anybody have some ideas for a simple solution to this?

 

[dabean]

Create a rule for https traffic (port 443) instead of specific IPs.

 

[DrJohnZoidberg]

Create a rule for https traffic (port 443) instead of specific IPs.

Thanks, almost forgot about this thread.

Yep, routing all https traffic would probably solve the issue but this also accounts for a lot of our other traffic. Pointless really having a multiple WAN links then because if that one link goes down that also means there goes all our https traffic.

Still trying to figure out which is the best option.

 

[ColinR]

Still trying to figure out which is the best option.

I route all traffic for ABSA - this includes Virgin Money: 169.202.9.0/24 over WAN1

 

[DrJohnZoidberg]

I route all traffic for ABSA - this includes Virgin Money: 169.202.9.0/24 over WAN1

Thanks for this! I will test on Monday.