are the 2 machines you have setup to firewall identical machines with identical ethernet interfaces set up the same way (i.e. offloading some packet processing to the card on one machine but not the other? Could it be that one machine just can't keep up. I assume you've reinstalled pfsense on the problem machine? Is the slow machine clean? as i'm sure you know many machines will reduce the clock speed if the cpu is getting too hot, the slow machine may just need a good cleaning.
mad.scientist.at.large (a good madscientist) -- I find it ironic that at a time when Americans are concerned about violence and Bullying in schools and elsewhere that we would elect a Grand Poohbah who's a violent bully and hates everyone, including himself, as demonstrated by speech and action. I've known 2 year olds that behaved more appropriately. Besides, there can be no rule of law when those in charge are contemptuous of the whole frame work on which our country is based . 20. Oct 2017 10:00 by [email protected]: > Hi Everyone, > > > > actually i have an any/any rule applied on all my interfaces. This I did > actually only for debugging issues. > > But I can see that packets still get blocked: > > > > Oct 20 17:48:34 gw02 filterlog: > 5,,,1000000103,igb0,match,block,in,4,0x0,,56,64553,0,DF,6,tcp,52,93.220.211.99,212.168.31.112,52498,80,0,FA,3467799626,3453635053,347,,nop;nop;TS > > Oct 20 17:48:34 gw02 filterlog: > 5,,,1000000103,igb0,match,block,in,4,0x0,,56,64554,0,DF,6,tcp,52,93.220.211.99,212.168.31.112,52498,80,0,FA,3467799626,3453635053,347,,nop;nop;TS > > Oct 20 17:48:35 gw02 filterlog: > 5,,,1000000103,igb0,match,block,in,4,0x0,,55,37998,0,DF,6,tcp,52,109.44.1.50,212.168.31.112,34675,443,0,FA,1545664688,2414488008,40,,nop;nop;TS > > Oct 20 17:48:35 gw02 filterlog: > 5,,,1000000103,igb0,match,block,in,4,0x0,,56,64555,0,DF,6,tcp,52,93.220.211.99,212.168.31.112,52498,80,0,FA,3467799626,3453635053,347,,nop;nop;TS > > Oct 20 17:48:36 gw02 filterlog: > 5,,,1000000103,igb0,match,block,in,4,0x0,,56,64556,0,DF,6,tcp,52,93.220.211.99,212.168.31.112,52498,80,0,FA,3467799626,3453635053,347,,nop;nop;TS > > Oct 20 17:48:38 gw02 filterlog: > 5,,,1000000103,igb0,match,block,in,4,0x0,,56,64557,0,DF,6,tcp,52,93.220.211.99,212.168.31.112,52498,80,0,FA,3467799626,3453635053,347,,nop;nop;TS > > Oct 20 17:48:42 gw02 filterlog: > 5,,,1000000103,igb0,match,block,in,4,0x0,,56,64558,0,DF,6,tcp,52,93.220.211.99,212.168.31.112,52498,80,0,FA,3467799626,3453635053,347,,nop;nop;TS > > > > Why? Normaly all traffic can pass the interfaces. > > > > Main problem is that I have 1% packetloss when it pass the Intenet connection > to my Upstream. I have a second firewall configured identical and here is no > packetloss. > > I Changed all cables and so… I am absolutely without any glue what can cause > such a problem. > > > > Could it be a problem that I have serval different networks applied on one > Interface without vlans? > > I Realy don’t know what I can do. This issue is very hard and all thinks I > already tested doesn’t not help to fix the issue. > > > > Kernel Messages and logs also looking OK for me. > > > > Maybe someone can help me out and give me some ideas > > > > Cheers > > > > Daniel > > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! > https://pfsense.org/gold _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
