Re: Connection drop (i.e. IRC) caused by pf/pfsync/carp/...?

2014-10-10 Thread Nicolas Christener
Hi First, thank you Paul and Andy for your input! I'm very thankful for your effort! On Thu, 2014-10-09 at 16:08 +0100, Andy wrote: > I have seen this when the allowed number or states is too low and PF > clears the idle states too early.. > > See http://www.openbsd.org/faq/pf/options.html; > s

Connection drop (i.e. IRC) caused by pf/pfsync/carp/...?

2014-10-09 Thread Nicolas Christener
Hello We have a somewhat curious issue and run out of ideas ;) We do not have a trigger to reproduce the issue, but we for example see some IRC disconnects from users behind our firewall. What we have: - two HP Proliant DL360 G5 with Broadcom BCM5708 NICs, 2GB RAM, Intel Xeon E5335@2.0GHz - Op