Re: [pfSense-discussion] Very odd issue - Transparent Firewall - 2 Locations

2009-07-16 Thread Chris Buechler
On Thu, Jul 16, 2009 at 4:01 AM, Angus Jordan wrote: > > I had configured the servers behind the pfsense bridge with the > gateway pointing directly at the pfsense firewall. When I modified the > gateway on the servers to use the real upstream gateway, all is > normal. > Ah yeah, that'll do it. Lo

Re: [pfSense-discussion] Very odd issue - Transparent Firewall - 2 Locations

2009-07-16 Thread Angus Jordan
On Thu, Jul 16, 2009 at 12:37 AM, Chris Buechler wrote: > On Thu, Jul 16, 2009 at 3:22 AM, Angus Jordan wrote: >> Hi again, >> >> I've attached the logs directly from the /var/log/filter.log. These >> show up at exactly the same time the download stops... >> > > What happens if you lower the MTU on

Re: [pfSense-discussion] Very odd issue - Transparent Firewall - 2 Locations

2009-07-16 Thread Chris Buechler
On Thu, Jul 16, 2009 at 3:22 AM, Angus Jordan wrote: > Hi again, > > I've attached the logs directly from the /var/log/filter.log. These > show up at exactly the same time the download stops... > What happens if you lower the MTU on the server to 1450?

Re: [pfSense-discussion] Very odd issue - Transparent Firewall - 2 Locations

2009-07-16 Thread Angus Jordan
Hi yet again, Here are the interface assignments: WAN: em1 LAN: em0 Regards, Angus On Thu, Jul 16, 2009 at 12:22 AM, Angus Jordan wrote: > Hi again, > > I've attached the logs directly from the /var/log/filter.log. These > show up at exactly the same time the download stops... > > Let me know

Re: [pfSense-discussion] Very odd issue - Transparent Firewall - 2 Locations

2009-07-16 Thread Angus Jordan
Hi again, I've attached the logs directly from the /var/log/filter.log. These show up at exactly the same time the download stops... Let me know what other information I can provide. Thanks, Angus On Thu, Jul 16, 2009 at 12:06 AM, Angus Jordan wrote: > Hi Chris, > >> Make sure you're using e10

Re: [pfSense-discussion] Very odd issue - Transparent Firewall - 2 Locations

2009-07-16 Thread Chris Buechler
On Thu, Jul 16, 2009 at 3:06 AM, Angus Jordan wrote: > Hi Chris, > >> Make sure you're using e1000 interfaces. Also might want to try >> "disable checksum offload" under System -> Advanced. > > Both of these options are selected, same symptoms..although it does > take much longer for the problem to

Re: [pfSense-discussion] Very odd issue - Transparent Firewall - 2 Locations

2009-07-16 Thread Angus Jordan
Hi Chris, > Make sure you're using e1000 interfaces. Also might want to try > "disable checksum offload" under System -> Advanced. Both of these options are selected, same symptoms..although it does take much longer for the problem to creep up. Unfortunately this is mainly affecting outbound ema

Re: [pfSense-discussion] Very odd issue - Transparent Firewall - 2 Locations

2009-07-15 Thread Chris Buechler
On Wed, Jul 15, 2009 at 6:57 PM, Angus Jordan wrote: > Hi Greg, > > Yes, the pfSense does show blocks in on the wan interface. I wish I > could send them to you, but for some reason since you sent this email > the issue seems to have stopped...but it will be back, I know that. > > One thing that I

Re: [pfSense-discussion] Very odd issue - Transparent Firewall - 2 Locations

2009-07-15 Thread Angus Jordan
: > > > Possibly an issue with TCP window scaling or PMTU-D. > > Are the logs generating any drops for the flow ? > > -Original Message- > From: Angus Jordan [mailto:angus.jor...@gmail.com] > Sent: 15 July 2009 22:08 > To: discussion@pfsense.com > Subject: [p

RE: [pfSense-discussion] Very odd issue - Transparent Firewall - 2 Locations

2009-07-15 Thread Greg Hennessy
Possibly an issue with TCP window scaling or PMTU-D. Are the logs generating any drops for the flow ? -Original Message- From: Angus Jordan [mailto:angus.jor...@gmail.com] Sent: 15 July 2009 22:08 To: discussion@pfsense.com Subject: [pfSense-discussion] Very odd issue - Transparent

[pfSense-discussion] Very odd issue - Transparent Firewall - 2 Locations

2009-07-15 Thread Angus Jordan
Hi there, We have deployed 2 pfSense Transparent firewalls at 2 separate locations. The commonality between both locations is their Internet provider. 1) pfSense running directly in the providers co-location (Customer servers -> Astaro NAT firewall -> pfSense Transparent Firewall -> Customer Colo