Server unresponsive when using transparent bridging w/ pf + pfsync

kevin k at kevinkevin.com
Mon Feb 15 07:06:02 UTC 2010


Hello,

 

I'd like to get thoughts / input to the following application of 2x FreeBSD
redundant firewalls.

 

I have two firewalls with transparent bridges of the inside/outside
interfaces (2 interfaces each firewall). A third interface is used for
PFSYNC state synchronization. Synchronization of states is fine. However, if
the bridge0 interface is enabled on the second firewall, the first firewall
completely halts and is unresponsive ,with no message on the console or in
/var/log/messages. Unfortunately debug flags are disabled on both machines.

 

One is 7.1-PRERELEASE and the other is 7.2-STABLE. I am in the process of
upgrading the first one to 7.2-STABLE as well.

 

 Is this a viable scenario in the first place?  Forgive my inexperience ,
any suggestions are welcome.

 

 

Many Thanks.

 



More information about the freebsd-pf mailing list