[nycbug-talk] openbsd/pf issue

[Okan Demirmen]

On Tue 2005.08.16 at 01:30 -0400, Marc Spitzer wrote:
> I am trying to update some client firewalls, from fbsd 4.9/ipf to obsd
> 3.7/pf and its not working.  When I have the obsd box up it seems to
> confuse the network.  There iis cluster stops working, you can only
> get to one of the ips and all the rest do not work.  The switches are
> dell 3324's and I think they are running 2003 on the webservers.
> 
> Obsd is  3.7, cvs is about a week old.
> 
> Now could carp, think it is off or pfsync be causing the problems?

i'm assuming you've looked for arp issues, right? are you replacing one
fbsd 4.9/ipf with a pair of carp'd obsd boxes? i'd say, first remove the
complexity if there are issue - one to one - then add the second obsd
firewall in once everything is right - done a few inline firewall swaps
like this.

cheers