[pfSense Support] Traceroute repeating itself

2011-03-09 Thread Shibashish
Following is an output from traceroute...

C:\>tracert -d 114.113.93.41

Tracing route to 114.113.93.41 over a maximum of 30 hops

  1<1 ms<1 ms<1 ms  192.168.1.11
  2 1 ms<1 ms 1 ms  11.241.82.161
  3 3 ms 5 ms 6 ms  11.241.80.109
  4 3 ms 3 ms 3 ms  203.17.13.6
  5 4 ms 3 ms 3 ms  59.13.55.149
  6 3 ms 3 ms 3 ms  59.13.55.149
  711 ms 6 ms 5 ms  29.64.42.55
  8 6 ms 6 ms 6 ms  114.113.8.4
  9 5 ms 5 ms 5 ms  114.113.87.44
 10 6 ms 6 ms14 ms  114.113.87.43
 11 5 ms 5 ms 5 ms  114.113.87.44
 1212 ms *6 ms  114.113.87.43
 1326 ms 8 ms13 ms  114.113.87.44
 1425 ms 7 ms 8 ms  114.113.87.43
 1510 ms 5 ms 5 ms  114.113.87.44
 1611 ms17 ms17 ms  114.113.87.43
 17 8 ms31 ms 5 ms  114.113.87.44
 1817 ms19 ms16 ms  114.113.87.43
 1918 ms 6 ms11 ms  114.113.87.44
 20 6 ms 6 ms10 ms  114.113.87.43
 21 6 ms 6 ms 6 ms  114.113.87.44
 22 6 ms 6 ms 7 ms  114.113.87.43
 23 6 ms 6 ms 6 ms  114.113.87.44
 24 9 ms17 ms 8 ms  114.113.87.43
 2556 ms64 ms25 ms  114.113.87.44
 26 9 ms 7 ms14 ms  114.113.87.43
 27 6 ms12 ms 6 ms  114.113.87.44
 28 7 ms 7 ms 7 ms  114.113.87.43
 2916 ms12 ms10 ms  114.113.87.44
 30 7 ms 9 ms 8 ms  114.113.87.43

Trace complete.

After the 9th hop, the traffic seems to be coming in/out of the pfsense box,
is this normal... have I configured something wrong?

114.113.87.44 is the real IP of the pfsense firewall
114.113.87.43 is the VRRP IP provided to me by my ISP and is the gateway to
pfsense

Note: all IP are changed for this post.

ShiB.
while ( ! ( succeed = try() ) );


Re: [pfSense Support] Traceroute repeating itself

2011-03-09 Thread James Bensley
I don't quite understand your set up but basically you have a routing loop,
you need to view and amend your routes if they are static or reconfiguring
your routing protocol if your using one.

--James. (This email was sent from a mobile device)


Re: [pfSense Support] Traceroute repeating itself

2011-03-09 Thread Shibashish
My setup...

ISP-WAN1--> FW1 (pfsense)
--> VRRP IP --> LAN
ISP-WAN2--> FW2 (pfsense)

The traceroute is looping between the FW1 and VRRP IP.

ShiB.
while ( ! ( succeed = try() ) );


On Wed, Mar 9, 2011 at 5:47 PM, James Bensley  wrote:

> I don't quite understand your set up but basically you have a routing loop,
> you need to view and amend your routes if they are static or reconfiguring
> your routing protocol if your using one.
>
> --James. (This email was sent from a mobile device)
>


Re: [pfSense Support] Traceroute repeating itself

2011-03-09 Thread James Bensley
So WAN1 is on one pfSense box and WAN2 is on another? Also, you
connect each box to an ISP and to the LAN?

-- 
James.

http://www.jamesbensley.co.cc/
There are 10 kinds of people in the world; Those who understand
Vigesimal, and J others...?

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Traceroute repeating itself

2011-03-09 Thread Shibashish
On Wed, Mar 9, 2011 at 6:53 PM, James Bensley  wrote:

> So WAN1 is on one pfSense box and WAN2 is on another? Also, you
> connect each box to an ISP and to the LAN?
>
> --
> James.
>
> http://www.jamesbensley.co.cc/
> There are 10 kinds of people in the world; Those who understand
> Vigesimal, and J others...?
>
>
No... ISP gives me 1 connection. The VRRP IP is 114.113.87.43. This VRRP IP
is the gateway to my pfsense boxes. The pfsense boxes get 2 wan ip,
114.113.87.44
& 114.113.87.45.

ShiB.
while ( ! ( succeed = try() ) );


Re: [pfSense Support] Traceroute repeating itself

2011-03-09 Thread ey
> On Wed, Mar 9, 2011 at 6:53 PM, James Bensley  wrote:
>
>> So WAN1 is on one pfSense box and WAN2 is on another? Also, you
>> connect each box to an ISP and to the LAN?
>>
>> --
>> James.
>>
>> http://www.jamesbensley.co.cc/
>> There are 10 kinds of people in the world; Those who understand
>> Vigesimal, and J others...?
>>
>>
> No... ISP gives me 1 connection. The VRRP IP is 114.113.87.43. This VRRP
> IP
> is the gateway to my pfsense boxes. The pfsense boxes get 2 wan ip,
> 114.113.87.44
> & 114.113.87.45.
>
> ShiB.
> while ( ! ( succeed = try() ) );
>
Where is 114.113.93.41 you are tracing to?


-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Traceroute repeating itself

2011-03-09 Thread Shibashish
114.113.93.41 is a ip from the Routed segment/Server Segment alotted to me
by my ISP.

ShiB.
while ( ! ( succeed = try() ) );


On Wed, Mar 9, 2011 at 8:33 PM,  wrote:

> > On Wed, Mar 9, 2011 at 6:53 PM, James Bensley 
> wrote:
> >
> >> So WAN1 is on one pfSense box and WAN2 is on another? Also, you
> >> connect each box to an ISP and to the LAN?
> >>
> >> --
> >> James.
> >>
> >> http://www.jamesbensley.co.cc/
> >> There are 10 kinds of people in the world; Those who understand
> >> Vigesimal, and J others...?
> >>
> >>
> > No... ISP gives me 1 connection. The VRRP IP is 114.113.87.43. This VRRP
> > IP
> > is the gateway to my pfsense boxes. The pfsense boxes get 2 wan ip,
> > 114.113.87.44
> > & 114.113.87.45.
> >
> > ShiB.
> > while ( ! ( succeed = try() ) );
> >
> Where is 114.113.93.41 you are tracing to?
>
>
> -
> To unsubscribe, e-mail: support-unsubscr...@pfsense.com
> For additional commands, e-mail: support-h...@pfsense.com
>
> Commercial support available - https://portal.pfsense.org
>
>


Re: [pfSense Support] Traceroute repeating itself

2011-03-09 Thread ey

> On Wed, Mar 9, 2011 at 8:33 PM,  wrote:
>
>> > On Wed, Mar 9, 2011 at 6:53 PM, James Bensley 
>> wrote:
>> >
>> >> So WAN1 is on one pfSense box and WAN2 is on another? Also, you
>> >> connect each box to an ISP and to the LAN?
>> >>
>> >> --
>> >> James.
>> >>
>> >> http://www.jamesbensley.co.cc/
>> >> There are 10 kinds of people in the world; Those who understand
>> >> Vigesimal, and J others...?
>> >>
>> >>
>> > No... ISP gives me 1 connection. The VRRP IP is 114.113.87.43. This
>> VRRP
>> > IP
>> > is the gateway to my pfsense boxes. The pfsense boxes get 2 wan ip,
>> > 114.113.87.44
>> > & 114.113.87.45.
>> >
>> > ShiB.
>> > while ( ! ( succeed = try() ) );
>> >
>> Where is 114.113.93.41 you are tracing to?
>>
>> 114.113.93.41 is a ip from the Routed segment/Server Segment alotted to me
> by my ISP.
>
> ShiB.
> while ( ! ( succeed = try() ) );
>
>
I do not get it -) Is it on your pfSense boxes? behind them? or on
provider's side?
Please do not top-post.



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Traceroute repeating itself

2011-03-09 Thread Chris Buechler
On Wed, Mar 9, 2011 at 10:20 AM, Shibashish  wrote:
> 114.113.93.41 is a ip from the Routed segment/Server Segment alotted to me
> by my ISP.

If you have a routed subnet that isn't assigned on a local interface,
and that doesn't have traceroute directed to another host via NAT,
you'll have a routing loop. It doesn't affect functionality and is
normal under such circumstances. Forward traceroute to another host
via 1:1 or port forward entries, or assign the subnet directly to an
internal interface, and it won't do that. It doesn't have a routing
table entry for that host as is so it sends it back to its default
gateway.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] Traceroute repeating itself

2011-03-09 Thread Shibashish
On Wed, Mar 9, 2011 at 11:30 PM, Chris Buechler  wrote:

> On Wed, Mar 9, 2011 at 10:20 AM, Shibashish  wrote:
> > 114.113.93.41 is a ip from the Routed segment/Server Segment alotted to
> me
> > by my ISP.
>
> If you have a routed subnet that isn't assigned on a local interface,
> and that doesn't have traceroute directed to another host via NAT,
> you'll have a routing loop. It doesn't affect functionality and is
> normal under such circumstances. Forward traceroute to another host
> via 1:1 or port forward entries, or assign the subnet directly to an
> internal interface, and it won't do that. It doesn't have a routing
> table entry for that host as is so it sends it back to its default
> gateway.
>
> -
>



> Works the way as you have described... awesome.. thanks man !
>
> ShiB.
> while ( ! ( succeed = try() ) );
>