Date: Tue, 06 Feb 2007 22:37:20 +0000 From: Richard Tector <richardtector@thekeelecentre.com> To: "Michael K. Smith - Adhost" <mksmith@adhost.com> Cc: freebsd-pf@freebsd.org Subject: Re: PFSync Not Working Correctly Message-ID: <45C90320.7030207@thekeelecentre.com> In-Reply-To: <17838240D9A5544AAA5FF95F8D52031601A8BD24@ad-exh01.adhost.lan> References: <17838240D9A5544AAA5FF95F8D52031601A8BD24@ad-exh01.adhost.lan>
next in thread | previous in thread | raw e-mail | index | archive | help
This is a cryptographically signed message in MIME format. --------------ms090106010604020502050709 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Michael K. Smith - Adhost wrote: > Hello All: > > I have two 6.2 RELEASE servers working in failover mode as PF Load > Balancers. When the MASTER box is failed (through reboot or interface > shutdown, etc.) the BACKUP box becomes MASTER as expected, but > connections that existed through the MASTER before the failover do not > transfer as expected to the new MASTER. New connections work > immediately. > > When I issue a 'pfctl -vvss' the established connection shows up > correctly in the state tables on both machines, so I would expect the > established connection to work immediately upon failover. > > If anyone has any insights I'd be grateful. I can also post any > relevent output or config snippets if someone thinks they would help. Are the interfaces the same in both machines? If the states are if-bound, they wont match packets on the backup server if the interface names are different. Regards, Richard --------------ms090106010604020502050709 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIHPDCC A5owggMDoAMCAQICAQcwDQYJKoZIhvcNAQEEBQAwgYExCzAJBgNVBAYTAlVLMRYwFAYDVQQI Ew1TdGFmZm9yZHNoaXJlMQ4wDAYDVQQHEwVLZWVsZTEZMBcGA1UEChMQVGhlIEtlZWxlIENl bnRyZTEvMC0GA1UEAxMmVGhlIEtlZWxlIENlbnRyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkw HhcNMDYwOTI5MTQyNTM4WhcNMTAwOTI5MTQyNTM4WjCBijELMAkGA1UEBhMCVUsxFjAUBgNV BAgTDVN0YWZmb3Jkc2hpcmUxGTAXBgNVBAoTEFRoZSBLZWVsZSBDZW50cmUxFzAVBgNVBAMT DlJpY2hhcmQgVGVjdG9yMS8wLQYJKoZIhvcNAQkBFiByaWNoYXJkdGVjdG9yQHRoZWtlZWxl Y2VudHJlLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxAE7t9Z0xg5iVOnqE2q7 UhaRoPrygXPXnZ4bHM8P2E4VKfpCP9tmU5rqP/zDwOKwUAFZsv1yHvzMj2d4S8nTP3eC75YY pztd1tiGIUyi2O1vtQuVrcogCC0Xe8TovubsjeosoEN6kujkTLhgWKj+/jDtb0ELiSwh7NnN CoStDvcCAwEAAaOCARUwggERMAkGA1UdEwQCMAAwLAYJYIZIAYb4QgENBB8WHU9wZW5TU0wg R2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBR5NRc2TrF8Qfj9ZMKvq5m5Lh9IFTCB tgYDVR0jBIGuMIGrgBSNCaM0QC1N5Hiyb/MPAVd/ouQEEqGBh6SBhDCBgTELMAkGA1UEBhMC VUsxFjAUBgNVBAgTDVN0YWZmb3Jkc2hpcmUxDjAMBgNVBAcTBUtlZWxlMRkwFwYDVQQKExBU aGUgS2VlbGUgQ2VudHJlMS8wLQYDVQQDEyZUaGUgS2VlbGUgQ2VudHJlIENlcnRpZmljYXRl IEF1dGhvcml0eYIJAJZYbH4e6XXnMA0GCSqGSIb3DQEBBAUAA4GBABy7Pq1hPDwR2vUs9Jlh LHXE1xLe/COWwTjmZ95mnvsX6XL6eVEzuc0xE66Mf1pyFxDKXxTCBj+G/ialE9AYiXTJAAVJ uvhvkm/u1vXdlNlfQJDRnZKFxrZsIT03LIysq+Hb4qZDpQvgWUUyGib4Ze7pNXPp8HOtlTgB ICafws5LMIIDmjCCAwOgAwIBAgIBBzANBgkqhkiG9w0BAQQFADCBgTELMAkGA1UEBhMCVUsx FjAUBgNVBAgTDVN0YWZmb3Jkc2hpcmUxDjAMBgNVBAcTBUtlZWxlMRkwFwYDVQQKExBUaGUg S2VlbGUgQ2VudHJlMS8wLQYDVQQDEyZUaGUgS2VlbGUgQ2VudHJlIENlcnRpZmljYXRlIEF1 dGhvcml0eTAeFw0wNjA5MjkxNDI1MzhaFw0xMDA5MjkxNDI1MzhaMIGKMQswCQYDVQQGEwJV SzEWMBQGA1UECBMNU3RhZmZvcmRzaGlyZTEZMBcGA1UEChMQVGhlIEtlZWxlIENlbnRyZTEX MBUGA1UEAxMOUmljaGFyZCBUZWN0b3IxLzAtBgkqhkiG9w0BCQEWIHJpY2hhcmR0ZWN0b3JA dGhla2VlbGVjZW50cmUuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEATu31nTG DmJU6eoTartSFpGg+vKBc9ednhsczw/YThUp+kI/22ZTmuo//MPA4rBQAVmy/XIe/MyPZ3hL ydM/d4LvlhinO13W2IYhTKLY7W+1C5WtyiAILRd7xOi+5uyN6iygQ3qS6ORMuGBYqP7+MO1v QQuJLCHs2c0KhK0O9wIDAQABo4IBFTCCAREwCQYDVR0TBAIwADAsBglghkgBhvhCAQ0EHxYd T3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFHk1FzZOsXxB+P1kwq+r mbkuH0gVMIG2BgNVHSMEga4wgauAFI0JozRALU3keLJv8w8BV3+i5AQSoYGHpIGEMIGBMQsw CQYDVQQGEwJVSzEWMBQGA1UECBMNU3RhZmZvcmRzaGlyZTEOMAwGA1UEBxMFS2VlbGUxGTAX BgNVBAoTEFRoZSBLZWVsZSBDZW50cmUxLzAtBgNVBAMTJlRoZSBLZWVsZSBDZW50cmUgQ2Vy dGlmaWNhdGUgQXV0aG9yaXR5ggkAllhsfh7pdecwDQYJKoZIhvcNAQEEBQADgYEAHLs+rWE8 PBHa9Sz0mWEsdcTXEt78I5bBOOZn3mae+xfpcvp5UTO5zTETrox/WnIXEMpfFMIGP4b+JqUT 0BiJdMkABUm6+G+Sb+7W9d2U2V9AkNGdkoXGtmwhPTcsjKyr4dvipkOlC+BZRTIaJvhl7uk1 c+nwc62VOAEgJp/CzksxggMbMIIDFwIBATCBhzCBgTELMAkGA1UEBhMCVUsxFjAUBgNVBAgT DVN0YWZmb3Jkc2hpcmUxDjAMBgNVBAcTBUtlZWxlMRkwFwYDVQQKExBUaGUgS2VlbGUgQ2Vu dHJlMS8wLQYDVQQDEyZUaGUgS2VlbGUgQ2VudHJlIENlcnRpZmljYXRlIEF1dGhvcml0eQIB BzAJBgUrDgMCGgUAoIIB6TAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJ BTEPFw0wNzAyMDYyMjM3MjBaMCMGCSqGSIb3DQEJBDEWBBTnlO1EjqQ0WPfL8aXMsP+/gbkN 3DBSBgkqhkiG9w0BCQ8xRTBDMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG 9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBmAYJKwYBBAGCNxAEMYGKMIGHMIGB MQswCQYDVQQGEwJVSzEWMBQGA1UECBMNU3RhZmZvcmRzaGlyZTEOMAwGA1UEBxMFS2VlbGUx GTAXBgNVBAoTEFRoZSBLZWVsZSBDZW50cmUxLzAtBgNVBAMTJlRoZSBLZWVsZSBDZW50cmUg Q2VydGlmaWNhdGUgQXV0aG9yaXR5AgEHMIGaBgsqhkiG9w0BCRACCzGBiqCBhzCBgTELMAkG A1UEBhMCVUsxFjAUBgNVBAgTDVN0YWZmb3Jkc2hpcmUxDjAMBgNVBAcTBUtlZWxlMRkwFwYD VQQKExBUaGUgS2VlbGUgQ2VudHJlMS8wLQYDVQQDEyZUaGUgS2VlbGUgQ2VudHJlIENlcnRp ZmljYXRlIEF1dGhvcml0eQIBBzANBgkqhkiG9w0BAQEFAASBgG9Z/0kyq1CUvNdU6/MbkS+C 9vYFvkdftGhdAscSRPktFgqA0uiwIR1QEnXmDevWFuV+orsN/2QSdozW2vVMiYupippCFSwI 8kIA5E6I0wlBJLJcaZCFID7E1NOk6tJqmYbtucL9SGhwE106XAL/8x2Lt/fMGSy6Ag/MDXMr ivu8AAAAAAAA --------------ms090106010604020502050709--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45C90320.7030207>