Move the servers to an OPT interface - I believe that will work.  The
way the port forwards (rdr in pf terminology) works it can't change
the destination address/port for a packet and send it back out the
same interface.

--Bill

On 5/5/07, Matthias Hertzog <[EMAIL PROTECTED]> wrote:
Hi Scott

Thanks for the answer. Do you see a way to create a workaround?

Best wishes,
Matthias



----- Original Message -----
From: "Scott Ullrich" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Saturday, May 05, 2007 7:40 PM
Subject: Re: [pfSense Support] Incoming Load balancer problem with
1.2-BETA-1-TESTING-SNAPSHOT-04-30-07 (and earlyer versions)


> Reflection is not supported on Load Balancing pools.  This will not work,
> sorry.
>
> Scott
>
>
> On 5/5/07, Matthias Hertzog <[EMAIL PROTECTED]> wrote:
>> Hi there!
>>
>> My idea is to create a LoadBalance/Failover setup for mailservers
>> (MX-Records). I have the following setup:
>>
>> WAN: A CARP address 123.123.123.123   (for example)
>> LAN: 192.168.1.x network
>> 4 Mailservers on the LAN: 192.168.1.10, 192.168.1.11, 192.168.1.12,
>> 192.168.1.13
>> A Pool named "MX" with those IPs: 192.168.1.10, 192.168.1.11,
>> 192.168.1.12,
>> 192.168.1.13
>> 1 "Virtual Server" config for 123.123.123.123, pointing the the "MX" pool
>>
>> MX-Records for some domains are pointing to: 123.123.123.123.
>>
>> Everything is working perfectly, incoming connections to
>> 123.123.123.123:25
>> are perfeclty 'round-robined' to my pool named "MX".
>>
>> So far so good, but when i try to connect to the pool from the LAN, it
>> fails. Example:
>>
>> telnet from my PC 192.168.1.99 to 123.123.123.123:25 -> timeout.
>>
>> Between LAN and WAN i have NAT enabled and a rule to allow all traffic
>> from
>> the LAN to WAN.
>>
>> Any ideas?
>>
>> Best wishes,
>> Matthias
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to