Re: Website(s) being blocked by CARP/PF firewall

2006-09-07 Thread Sam Chill
On 9/7/06, Chris Cameron <[EMAIL PROTECTED]> wrote: Have two 3.8 firewalls in a CARP setup, and through this firewall I'm unable to get to ticketmaster.ca or .com. They both have different IPs. On the master CARP firewall, with tcpdump on the external interface: It might be useful if you post

Re: Website(s) being blocked by CARP/PF firewall

2006-09-07 Thread Spruell, Darren-Perot
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > I didn't see any "Can't access Tickmaster.ca" entries; but I > think I have the rest covered. > > No other sites have this problem. The firewall sits in front > of an office of 15 or so, so I believe I would have heard > something. Logging is

Re: Website(s) being blocked by CARP/PF firewall

2006-09-07 Thread Nick Shank
Chris Cameron wrote: On Thu, 2006-09-07 at 10:46 -0400, Asenchi wrote: On 9/7/06, Chris Cameron <[EMAIL PROTECTED]> wrote: Have two 3.8 firewalls in a CARP setup, and through this firewall I'm unable to get to ticketmaster.ca or .com. They both have different IPs. But make

Re: Website(s) being blocked by CARP/PF firewall

2006-09-07 Thread Tim Pushor
Again, does anyone have any ideas? Can other people access ticketmaster through their CARP'd NAT firewall? Yeah it works fine over here. How about cranking PF's debugging and watching syslog? pfctl -x loud Tim

Re: Website(s) being blocked by CARP/PF firewall

2006-09-07 Thread Chris Cameron
On Thu, 2006-09-07 at 10:46 -0400, Asenchi wrote: > On 9/7/06, Chris Cameron <[EMAIL PROTECTED]> wrote: > > Have two 3.8 firewalls in a CARP setup, and through this firewall I'm > > unable to get to ticketmaster.ca or .com. They both have different IPs. > But make sure you have read and understand

Re: Website(s) being blocked by CARP/PF firewall

2006-09-07 Thread Asenchi
On 9/7/06, Chris Cameron <[EMAIL PROTECTED]> wrote: Have two 3.8 firewalls in a CARP setup, and through this firewall I'm unable to get to ticketmaster.ca or .com. They both have different IPs. On the master CARP firewall, with tcpdump on the external interface: If you want help you are going

Website(s) being blocked by CARP/PF firewall (2 of 2)

2006-09-07 Thread Chris Cameron
Sorry, hit Ctrl+Enter. 192.168.0.1 - CARP IP 192.168.0.2 - Master firewall IP On the master CARP firewall, with tcpdump on the external interface: Connecting behind firewall: 08:18:30.705631 192.168.0.1.53119 > 209.104.48.144.80: S 4111080674:4111080674(0) win 16384 (DF) [tos 0x10] 08:18:30.

Website(s) being blocked by CARP/PF firewall

2006-09-07 Thread Chris Cameron
Have two 3.8 firewalls in a CARP setup, and through this firewall I'm unable to get to ticketmaster.ca or .com. They both have different IPs. On the master CARP firewall, with tcpdump on the external interface: