[nycbug-talk] openbsd/pf issue
Tue Aug 16 09:35:36 EDT 2005
On Tue 2005.08.16 at 01:30 -0400, Marc Spitzer wrote:
> I am trying to update some client firewalls, from fbsd 4.9/ipf to obsd
> 3.7/pf and its not working. When I have the obsd box up it seems to
> confuse the network. There iis cluster stops working, you can only
> get to one of the ips and all the rest do not work. The switches are
> dell 3324's and I think they are running 2003 on the webservers.
> Obsd is 3.7, cvs is about a week old.
> Now could carp, think it is off or pfsync be causing the problems?
i'm assuming you've looked for arp issues, right? are you replacing one
fbsd 4.9/ipf with a pair of carp'd obsd boxes? i'd say, first remove the
complexity if there are issue - one to one - then add the second obsd
firewall in once everything is right - done a few inline firewall swaps
More information about the talk