You are sure your internal hosts use the CARP LAN VIP as gateway? Holger
> -----Original Message----- > From: Alastair Stevens [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 19, 2006 11:47 AM > To: support@pfsense.com > Subject: RE: [pfSense Support] NAT/port forward not coping with CARP? > > > > Hmmm, still no joy. I've fixed all the NAT settings with the > correct interface and external IPs (virtuals). But it's the > same story - the firewall logs show connections being allowed > to pass, and being directed to the correct target, but we get > no actual response. There must be a missing link somewhere.... > > Cheers > Alastair > > > -----Original Message----- > From: Holger Bauer [mailto:[EMAIL PROTECTED] > Sent: Wed 19/07/2006 09:25 > To: support@pfsense.com > Subject: RE: [pfSense Support] NAT/port forward not coping with CARP? > > For a CARP setup the real IPs shouldn't be used for anything > other then the firewall itself (as these can't failover), so > you should use the CARP VIPs for both, portforwardings and > outbound NAT. > > Holger > ____________ Virus checked by G DATA AntiVirusKit --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]