PFsense 2.3.2 and MultiWan switching Problem

[dersch]

Hi,

I have a MultiWan Setup with groups for loadbalance and failover. sometimes my main wan struggles a lot (Unitymedia cable).

If this happens i get ton's of emails from my PFsense "obmitting from group …. " and my pfsense does not react anymore.
After a long while (up to 1hr) the PF sense recovers but with 2 warnings:

pf_busy

    PF was wedged/busy and has been reset. @ 2017-02-15 13:01:00

Filter Reload

    There were error(s) loading the rules: pfctl: DIOCXCOMMIT: Device busy - The line in question reads [0]: @ 2017-02-15 13:01:03

But i does not know what it means. Normally my multiwan setup works good. Even the loadbalancing as well as the failover if some other wan is offline.
Only if my "main" wan with static ip struggles i have such problems. It causes a lot of problems and i would like to fix it to have a stable failover.
I can't set another wan as "main" wan since they are connected via PTP wireless connections to another buildings.

Any idea how to fix that?

BR
Dirk

[awitty]

I assumed you have your LAN Net firewall rule pointing to a failover gateway rather than just the default ?

[dersch]

Hi,

yes i did that. I have 4 rules from top to down for ipv4:

1. Loadbalancing GW Group
2. WAN1 Failover Group
3. WAN2 Failover Group
4. WAN3 Failover Group

The 5th Rule is for IPv6 where i only have a tunnelbroker uplink via Wan1. I'm still fighting with multi wan & v6 so i don't have v6 wan groups.

[awitty]

Just to clarify,

I mean the default rule called "Default allow LAN to any rule" ?  This needs to point to a failover gateway and not the out of the box default.

I'm new to Pfsense and struggling a little myself, so I could be wrong but I had a similar problem to yours and this resolved it.

[dersch]

I don't have that rule anymore or let's say changed it to that 4 rules i described. I attach a picture.

I found that way somewhere as i started with mwan.