Could Not open some sites from Windows Vista and Server 2008 when using FreeBSD as gw

[Владислав Недосекин]

Hi,
I have found what lines in pf.conf are bloking acess.
When I disable this lines
pass out on $int_if tagged Q1 keep state queue q1_in
pass out on $int_if tagged Q2 keep state queue q2_in
pass out on $int_if tagged Q3 keep state queue q3_in
pass out on $int_if tagged Q4 keep state queue q4_in

It goes very well

May be some one could explain this situation.

With best regards
Vladislav


2008/3/5, Mike Tancsa <mike at sentex.net>:
> At 03:49 AM 3/5/2008, =?KOI8-R?B?98zBxMnTzMHXIO7FxM/TxcvJzg==?= wrote:
>  >We are using FreeBSD as GateWay with PF.
>  >And the problem is that some web-sites as Gmail.com or Msn.com are
>  >unavailable from machines with Vista or Server 2008 installed.
>  >If use external or internal proxy (Kerio WinRoute, wich also goes through
>  >the same FreeBSD gw) they are opening correctly.
>  >Also in 6.1 version were problems with skype from such machines.
>
>
> Its hard to say without seeing your pf rules.  But I seem to recall
>  issues with Vista where pf rules did not have keep state enabled.
>
>
>          ---Mike
>
>