Thanks for reading this.

pair of pfsense firewalls with
* external carp IP 1.2.3.4
* internal carp IP 192.168.0.1 with each machine on .2 and .3

the bit that works:
        we have a couple of web servers, and I created a pool,
        and a virtual server which listens on external carp
        IP, then added the rule permitting traffic.

        works just fine, I can see the web servers from
        outside world

the bit that doesn't
        wanting to test the load balanced pool from inside,
        I created a virtual server listening on the internal
        192.168 address, no rules were required because
        internal (LAN) traffic is 100% permitted.

Using tcpdump I see the tcp connection coming from desktop:highport to
192.168.0.1:80, there's then a conn from 1921.68.0.1:highport to
webserver:80 which completes, but no traffic goes back to desktop!

nothing in the firewall logs indicates dropped traffic!

any clues gratefully received.

thanks
Paul

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to