On 2011-11-27 10:14, Eugen Leitl wrote:
On Sun, Nov 27, 2011 at 04:07:31PM +0100, Eugen Leitl wrote:
While trying to build VIPs and do 1:1 NAT I accidentally noticed
that setting LAN to 10.0.0.1/8 (instead of 10.0.0.1/24)
will make the system unresponsive (this is 2.1-DEVELOPMENT (i386)
built on Fri Oct 21 12:51:56 EDT 2011). I also have other hosts
on the 10.0.0.0/24 network -- not sure what mixed network masks
on the same LAN do. I was not able to ping the WAN interface
at all.
I reset the LAN back to 10.0.0.1/24 via an IPMI session, at
which point the system sprang back.
I'll try doing the same with a /16 mask, let's see what that
does.
Behavior is the same with /16, ping gets me "Destination Host Unreachable",
while the pfSense itself has no isssue reaching anything outside.
As soon as I reset the LAN back to 10.0.0.1/24 everything
from the outside instantly works again. Weird.
Are you sure you don't have a subnet overlapping on another interface?
_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list
