Ipsec ping works, http not

richie1985 · Jan 6, 2017, 10:46 AM

Hi,

we have crazy situation and i dont know what could be the problem. A Client (192.168.1.202) want to browse a webpage to on the server (192.168.200.130) and gets timeout:

a ping to the server is working fine:

wireshark says this:

here the network:

have you a idea what could be the problem?

richie1985 · Jan 10, 2017, 8:12 AM

has no one a idea?

richie1985 · Jan 12, 2017, 3:13 PM

oh damn this was the reason:

Proxmox:

IMPORTANT: Enter the web GUI and go in System > Advanced > Networking and flag Disable hardware checksum offload. If you don't do it layer3 traffic from lan to wan will not work, or will be really slow (but traffic to/from the firewall will work fine: see the pf sense wiki about virtio for details https://doc.pfsense.org/index.php/VirtIO_Driver_Support )