Hi All,

 

I'm dealing again with the task of publishing my servers' services over
two different internet connections (in conjuncion with load balancing
outgoing traffic over the same internet connections).

 

Now I'll give you more detailed informations.

 

My firewall is a pc with pfsense upgraded at the latest version
available (pfSense-Full-Update-1.2-BETA-1-TESTING-SNAPSHOT-05-02-07). It
has three interfaces Lan, Wan and Opt1:

 

LAN: 172.16.0.1/24

WAN: 217.x.x.202/27 - with gw 217.x.x.193

OPT1: 192.168.0.200/24 - with gw 192.168.0.1

 

In my internal network I have a web server with the ip address
172.16.0.2.

 

I NAT'ed the port 80 using "Port Forward" on both WAN and OPT1 using the
address of the internal web server (172.16.0.2).

The strange thing is that if i try  to access my web server from the WAN
ip address, everything works correctly and I can browse my web pages,
but if i try to browse the web server using the OPT1 address, both using
telnet on port 80 and internet explorer, the connection times out. The
content of the firewall states related to this problem is: 172.16.0.2:80
<- 192.168.0.200:80 <- 192.168.0.36:4196 SYN_SENT:ESTABLISHED.

 

Furthermore, even if I explicitly deny the ICMP traffic on the OPT1
interface, it replies to ping requests.

 

All the described problems doesn't happen if I remove the gateway from
the OPT1's interface configuration (but this is needed for policy
routing in multi wan environments)

 

Can you help me?

 

Regards

 

r3N0oV4

 

Reply via email to