BARDOU Pierre escribis:
The only problem I noticed is an abnormally long ping (usually 0.3ms, sometimes -3 or 4 times a day says nagios- up to 30ms).
Mmmmm... maybe it's not a PD-related issue. Check your network. Despite of that, check the ICMP rules; use tcpdumo(1) also to debug it.
I am worried about the numbers since this firewall is higly critical. Since it protects Citrix hosted applications, I will get instantly killed if delays are too long...
I use PF in front of networks segments of web-hosting company. An I sleep very well...
-- Thanks, Jordi Espasa Clofent