[nycbug-talk] openbsd/pf issue

Okan Demirmen okan
Tue Aug 16 09:35:36 EDT 2005

On Tue 2005.08.16 at 01:30 -0400, Marc Spitzer wrote:
> I am trying to update some client firewalls, from fbsd 4.9/ipf to obsd
> 3.7/pf and its not working.  When I have the obsd box up it seems to
> confuse the network.  There iis cluster stops working, you can only
> get to one of the ips and all the rest do not work.  The switches are
> dell 3324's and I think they are running 2003 on the webservers.
> Obsd is  3.7, cvs is about a week old.
> Now could carp, think it is off or pfsync be causing the problems?

i'm assuming you've looked for arp issues, right? are you replacing one
fbsd 4.9/ipf with a pair of carp'd obsd boxes? i'd say, first remove the
complexity if there are issue - one to one - then add the second obsd
firewall in once everything is right - done a few inline firewall swaps
like this.


More information about the talk mailing list