best method of routing through route domains?

Hi,

I've been getting online again since a long time from the big I.
I'm glad to be back! :-)

I'd like to know some insights on how to route from route domain 0
to route domain 2 as I have lost a password again, and until I can
get in the router (LTE) I'd like to keep my home LAN seperated from
the LTE access point.

I've had a rough time the last 8 months so I'm trying to pick up
the pieces, currently I have made a change to socks5 proxy through
mv VPS at obsd.amsterdam but this is only temporarily as I don't
want to burden that network on my youtube habits.

I had tried pair(4) but it seemed to have leakage and in the end
it wasn't really working for me.

Here is what I have:

genesys$ more connect.sh
#!/bin/sh

route -T2 exec ssh mp

this connects me to my vps called mentalprison.

Host mp
 Hostname mentalprison.mainrechner.de
 IdentityFile /home/exe/.ssh/id_amsterdam
 Port 59
 BindInterface dwqe1
 DynamicForward 192.168.8.20:8888

This is my .ssh/config entry.

genesys# pfctl -srules
block return all
pass all flags S/SA
block return in on ! lo0 proto tcp from any to any port 6000:6010
block return out log proto tcp all user = 55
block return out log proto udp all user = 55
pass out on rdomain 2 inet all flags S/SA
pass on dwqe0 all flags S/SA
pass in on dwqe0 inet proto tcp from any to any port = 8888 flags S/SA rtable 2 divert-to 192.168.8.20 port 8888

and this is my pf config as I have it now.  It works nicely, but like I
said I'd like to get something better.

The gateway is a riscv64 visionfive 2 with 2 interfaces.

Any hints will be appreciated greatly.

-peter

PS: I know posting firewall rules is not kosher really :-(.

-- 
Peter J. Philipp
Am Deutschhof 5
97422 Schweinfurt
Contact by mobile: +49 151 7226 5695