Well if your no longer logging errors your headed in the right direction. Have you rebooted? Have you telnetted from the firewall to the private ip port 25?
Scott On 11/10/05, Lee Hetherington <[EMAIL PROTECTED]> wrote: > Nope. Doesnt even log any errors in the firewall log either... > > > > Scott Ullrich wrote: > > >I dont know you tell us. Did it work? > > > > > >On 11/10/05, Lee Hetherington <[EMAIL PROTECTED]> wrote: > > > > > >>Ok here is what I have > >> > >>WAN interface > >> > >>Allow anything to connect to vip address on port 25 > >>Allow anything to connect to internal /24 on port 25 > >> > >>LAN Interface > >> > >>Allow anything to connect to internal/24 on port 25 > >> > >>Surely that covers it off? > >> > >>Lee > >> > >>Bill Marquette wrote: > >> > >> > >> > >>>NAT occurs before filtering. You need a rule on the WAN interface > >>>allowing connections to the physical server IPs. > >>> > >>>--Bill > >>> > >>>On 11/10/05, Lee Hetherington <[EMAIL PROTECTED]> wrote: > >>> > >>> > >>> > >>> > >>>>I have. On the wan interface, im allowing anything to connect to the vip > >>>>85.116.30.1 address on port 25 > >>>> > >>>>Do I need any others? > >>>> > >>>> > >>>>Scott Ullrich wrote: > >>>> > >>>> > >>>> > >>>> > >>>> > >>>>>Perhaps you need firewall rules!? > >>>>> > >>>>>On 11/10/05, Lee Hetherington <[EMAIL PROTECTED]> wrote: > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>0.92 Latest > >>>>>> > >>>>>>For some reason left is master for the carp of the smtp and right is > >>>>>>master of the carp for the external (routing)... > >>>>>> > >>>>>>On the machine which is the inbound carp I have: > >>>>>> > >>>>>>DENIED: > >>>>>> > >>>>>>Aug 13 16:12:12 WAN 81.174.235.11.34623 85.116.30.1.25 > >>>>>>TCP > >>>>>> > >>>>>> > >>>>>>On the machine which is the smtp carp I have: > >>>>>> > >>>>>>DENIED: > >>>>>> > >>>>>>Nov 10 16:20:48 WAN 81.174.235.11.34683 192.168.7.1.25 > >>>>>>TCP > >>>>>> > >>>>>> > >>>>>>Looks like one of them has the wrong date too :) > >>>>>> > >>>>>>Scott Ullrich wrote: > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>>>1. What version > >>>>>>>2. What do you see in the firewall filter logs regarding these > >>>>>>>connections > >>>>>>> > >>>>>>>On 11/10/05, Lee Hetherington <[EMAIL PROTECTED]> wrote: > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>>>Ok, > >>>>>>>> > >>>>>>>>I have left and right pfsense boxes. On my opt1 interface I have a > >>>>>>>>carp > >>>>>>>>setup: 85.116.x.1/27 is the network im using. My internal network is > >>>>>>>>then 192.168.x.0/24 > >>>>>>>> > >>>>>>>>I have 85.116.x.1 assigned as the virtual > >>>>>>>>I have 85.116.x.2 on left > >>>>>>>>85.116.x.3 on right > >>>>>>>> > >>>>>>>>I want to load balance 85.116.x.1 inbound on port 25 to a pool i have > >>>>>>>>setup which contains: > >>>>>>>> > >>>>>>>>192.168.x.1 > >>>>>>>>192.168.x.4 > >>>>>>>> > >>>>>>>>The left and right also have > >>>>>>>> > >>>>>>>>192.168.x.254 as virtual > >>>>>>>>192.168.x.252 on left > >>>>>>>>192.168.x.253 on right > >>>>>>>> > >>>>>>>>I have a firewall rule which allows * to connect on port 25 to the > >>>>>>>>carp > >>>>>>>>address which is 85.116.x.1 > >>>>>>>> > >>>>>>>>The tcp connection just times out. At one point it was in the log > >>>>>>>>saying "bad gateway 85.116.x.1" > >>>>>>>> > >>>>>>>>Other than this, its exactly as described in the IncomingLoadBalancing > >>>>>>>>example on the wiki. > >>>>>>>> > >>>>>>>>Lee > >>>>>>>> > >>>>>>>> > >>>>>>>>Scott Ullrich wrote: > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>Many people have followed these and they work. You'll need to > >>>>>>>>>provide > >>>>>>>>>more information of how its all setup and what doesn't work. > >>>>>>>>> > >>>>>>>>>On 11/10/05, Lee Hetherington <[EMAIL PROTECTED]> wrote: > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>>>Hi Scott, > >>>>>>>>>> > >>>>>>>>>>I followed those exactly. And yet I still have no Joy :( > >>>>>>>>>> > >>>>>>>>>>Can anyone suggest anything which I may need to tick or the such > >>>>>>>>>>which > >>>>>>>>>>may prevent this from working? > >>>>>>>>>> > >>>>>>>>>>Regards > >>>>>>>>>> > >>>>>>>>>>Lee > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>Scott Ullrich wrote: > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>>Try visiting these docs: > >>>>>>>>>>> > >>>>>>>>>>>http://wiki.pfsense.com/wikka.php?wakka=OutgoingLoadBalancing > >>>>>>>>>>>http://wiki.pfsense.com/wikka.php?wakka=IncomingLoadBalancing > >>>>>>>>>>> > >>>>>>>>>>>Scott > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>>On 11/10/05, Lee Hetherington <[EMAIL PROTECTED]> wrote: > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>>>Hi, > >>>>>>>>>>>> > >>>>>>>>>>>>Im new to pfsense and have two machines running 0.92 both with 2x > >>>>>>>>>>>>Dual > >>>>>>>>>>>>Port 100+ Intel Management adaptors. I cannot for the life of me > >>>>>>>>>>>>get > >>>>>>>>>>>>load balancing working. Here is how I have them setup: > >>>>>>>>>>>> > >>>>>>>>>>>>left.pfsense > >>>>>>>>>>>> > >>>>>>>>>>>>fxp1 Lan > >>>>>>>>>>>>fxp2 Cross Over cable to right.pfsense for sync > >>>>>>>>>>>>fxp3 DMZ Servers > >>>>>>>>>>>>fxp4 WAN > >>>>>>>>>>>> > >>>>>>>>>>>>right.pfsense > >>>>>>>>>>>> > >>>>>>>>>>>>fxp1 Lan > >>>>>>>>>>>>fxp2 Cross Over cable to right.pfsense for sync > >>>>>>>>>>>>fxp3 DMZ Servers > >>>>>>>>>>>>fxp4 WAN > >>>>>>>>>>>> > >>>>>>>>>>>>On my internal lan and wan I have carp's setup with virtual ip's. > >>>>>>>>>>>>I wish > >>>>>>>>>>>>to use one of my virtual ip's to load balance mail to 2 servers > >>>>>>>>>>>>on my > >>>>>>>>>>>>internal lan. I have it all setup as per on the wiki but I > >>>>>>>>>>>>cannot get > >>>>>>>>>>>>anything through to the mailservers on the internal lan. I have a > >>>>>>>>>>>>firewall rule which allows * to connect to the virtual ip on port > >>>>>>>>>>>>25. > >>>>>>>>>>>> > >>>>>>>>>>>>Any ideas? please help. > >>>>>>>>>>>> > >>>>>>>>>>>>Lee > >>>>>>>>>>>> > >>>>>>>>>>>>--------------------------------------------------------------------- > >>>>>>>>>>>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>>>>>>>>>>For additional commands, e-mail: [EMAIL PROTECTED] > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>> > >>>>>>>>>>>--------------------------------------------------------------------- > >>>>>>>>>>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>>>>>>>>>For additional commands, e-mail: [EMAIL PROTECTED] > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>>____________________________________________________________________ > >>>>>>>>>>>This e-mail has been scanned for viruses by Mailsauce. For further > >>>>>>>>>>>information visit http://www.mailsauce.com > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>> > >>>>>>>>>>--------------------------------------------------------------------- > >>>>>>>>>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>>>>>>>>For additional commands, e-mail: [EMAIL PROTECTED] > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>--------------------------------------------------------------------- > >>>>>>>>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>>>>>>>For additional commands, e-mail: [EMAIL PROTECTED] > >>>>>>>>> > >>>>>>>>> > >>>>>>>>>____________________________________________________________________ > >>>>>>>>>This e-mail has been scanned for viruses by Mailsauce. For further > >>>>>>>>>information visit http://www.mailsauce.com > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>--------------------------------------------------------------------- > >>>>>>>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>>>>>>For additional commands, e-mail: [EMAIL PROTECTED] > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>--------------------------------------------------------------------- > >>>>>>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>>>>>For additional commands, e-mail: [EMAIL PROTECTED] > >>>>>>> > >>>>>>> > >>>>>>>____________________________________________________________________ > >>>>>>>This e-mail has been scanned for viruses by Mailsauce. For further > >>>>>>>information visit http://www.mailsauce.com > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>--------------------------------------------------------------------- > >>>>>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>>>>For additional commands, e-mail: [EMAIL PROTECTED] > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>--------------------------------------------------------------------- > >>>>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>>>For additional commands, e-mail: [EMAIL PROTECTED] > >>>>> > >>>>> > >>>>>____________________________________________________________________ > >>>>>This e-mail has been scanned for viruses by Mailsauce. For further > >>>>>information visit http://www.mailsauce.com > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>--------------------------------------------------------------------- > >>>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>>For additional commands, e-mail: [EMAIL PROTECTED] > >>>> > >>>> > >>>> > >>>> > >>>> > >>>> > >>>--------------------------------------------------------------------- > >>>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>>For additional commands, e-mail: [EMAIL PROTECTED] > >>> > >>> > >>>____________________________________________________________________ > >>>This e-mail has been scanned for viruses by Mailsauce. For further > >>>information visit http://www.mailsauce.com > >>> > >>> > >>> > >>> > >>> > >>> > >>> > >>--------------------------------------------------------------------- > >>To unsubscribe, e-mail: [EMAIL PROTECTED] > >>For additional commands, e-mail: [EMAIL PROTECTED] > >> > >> > >> > >> > > > >--------------------------------------------------------------------- > >To unsubscribe, e-mail: [EMAIL PROTECTED] > >For additional commands, e-mail: [EMAIL PROTECTED] > > > > > >____________________________________________________________________ > >This e-mail has been scanned for viruses by Mailsauce. For further > >information visit http://www.mailsauce.com > > > > > > > > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
