random lockout single connection
-
Hi all,
my hard- and software:
Netgate SG-8860
Version: ADI_RCCVE-01.00.00.17-nodebug
22.01-RELEASE (amd64)
FreeBSD 12.3-STABLE
pfsense+we have a nginx proxy for web. This proxy is reachable via NAT and connected to LAN over a cisco managed switch. Since 2 weeks the proxy randomly cannot connect to the internal IP of the firewall. On the firewall runs Suricata without blocking and pfblockerng. A restart of the firewall solves the issue for a random time. From the proxy I can ping all other devices in LAN. If I switch the LAN adress of the proxy, its also blocked.
I restarted all devices.
What mechanism could be responsible? In systemlogs I can not find anything usefull. Where can I further investigate.
Any ideas are welcome.greetings dirk
-
@anonymnuss said in random lockout single connection:
If I switch the LAN adress of the proxy, its also blocked
Hmm, that sounds like something blocking at layer2. In pfSense that could only be the Captive Portal.
Try running a packet capture in pfSense whilst you ping from the proxy. Do the pings make it that far?
I assume you don't see the traffic blocked in the firewall log?
Steve
