Ipsec ping works, http not
we have crazy situation and i dont know what could be the problem. A Client (192.168.1.202) want to browse a webpage to on the server (192.168.200.130) and gets timeout:
a ping to the server is working fine:
wireshark says this:
here the network:
have you a idea what could be the problem?
has no one a idea?
oh damn this was the reason:
IMPORTANT: Enter the web GUI and go in System > Advanced > Networking and flag Disable hardware checksum offload. If you don't do it layer3 traffic from lan to wan will not work, or will be really slow (but traffic to/from the firewall will work fine: see the pf sense wiki about virtio for details https://doc.pfsense.org/index.php/VirtIO_Driver_Support )