Hi,
I solved the problem. The problem was false configuration of IPFW
("via $interface" statement).
Thanks.
Alinti EVGENY YURCHENKO <[email protected]>
From: Berk Gulenler <[email protected]>
Subject: [pfSense Support] Mac OS Package Lost
To: [email protected]
Date: Friday, August 27, 2010, 7:29 AM
Hi,
My Pfsense firewall has 3 interfaces, WAN, LAN and DMZ. Mac
OS computers in my LAN net can not connect to an external
site on net. When I sniff the traffic on both WAN and LAN
interfaces I saw a situation like this:
MAC -> LAN -> WAN -> SITE (SYN)
SITE -> WAN x LAN x MAC (SYN ACK)
I see SYN ACK packages on my WAN interface coming from SITE
but I don't see them on my LAN interface. Packages getting
lost between my WAN and LAN interfaces. Is there any way to
debug the problem? / Is there any one having the same
problem?
Thanks.
-- Berk Gulenler
I suppose you are talking about TCP traffic, do TCP-ports in SYN and
SYN ACK match? What do you see in logs, why SYN ACKs are discarded?
What about ICMP?
Evgeny.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
Commercial support available - https://portal.pfsense.org
--
Berk Gulenler
System Administrator
Bogazici University Computer Center
Phone: +90 212 359 47 16
Fax: +90 212 257 50 21
E-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
Commercial support available - https://portal.pfsense.org