Sorry, hit Ctrl+Enter. 192.168.0.1 - CARP IP 192.168.0.2 - Master firewall IP
On the master CARP firewall, with tcpdump on the external interface: Connecting behind firewall: 08:18:30.705631 192.168.0.1.53119 > 209.104.48.144.80: S 4111080674:4111080674(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale 0,nop,nop,timestamp 1177467059 0> (DF) [tos 0x10] 08:18:30.785334 209.104.48.144.80 > 192.168.0.1.53119: R 0:0(0) ack 4111080675 win 0 (DF) Connecting on firewall: 08:18:48.623292 192.168.0.2.7390 > 209.104.48.144.80: S 4083495652:4083495652(0) win 16384 <mss 1460,nop,nop,sackOK,nop,wscale 0,nop,nop,timestamp 404854925 0> (DF) [tos 0x10] 08:18:48.704195 209.104.48.144.80 > 192.168.0.2.7390: S 35837621:35837621(0) ack 4083495653 win 5792 <mss 1460,sackOK,timestamp 125092407 404854925,nop,wscale 0> (DF) 08:18:48.704334 192.168.0.2.7390 > 209.104.48.144.80: . ack 1 win 16384 <nop,nop,timestamp 404854926 125092407> (DF) [tos 0x10] 08:18:50.449324 192.168.0.2.7390 > 209.104.48.144.80: F 1:1(0) ack 1 win 16384 <nop,nop,timestamp 404854929 125092407> (DF) [tos 0x10] 08:18:50.528828 209.104.48.144.80 > 192.168.0.2.7390: F 1:1(0) ack 2 win 5792 <nop,nop,timestamp 125092590 404854929> (DF) 08:18:50.528933 192.168.0.2.7390 > 209.104.48.144.80: . ack 2 win 16383 <nop,nop,timestamp 404854929 125092590> (DF) [tos 0x10] Anyone know why the ticketmaster server closes the connection (from what I can tell) when I connect with my CARP IP, and not when I just use the local IP? Thanks, Chris