[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: pf/carp for redundant production use



Yep, the same behavior when the master dies. The solution that the person in #pf told me is use routing but I don't know how to implement. He told me that it's an issue in pf's NAT.

Michiel van Baak writes:

On 00:21, Sun 25 Sep 05, Neil wrote:
Hi everyone,

Just chat with someone in #pf and found out that pf at the moment cannot maintain state on TCP connections from internal machine to external machine when network cable on master firewall's external interface is removed.

Anyways, most connections are coming from outside to inside and that is working well. :)


Is the same true when the master dies ??


--
Michiel van Baak
http://michiel.vanbaak.info
[email protected]
GnuPG key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x7E0B9A2D


"Why is it drug addicts and computer afficionados are both called users?"