I don't know if it's pfSense or the server outside the local network.

Belcebu Gdl

I wrote this in Spanish because the explanation of my problem is very long, and I’m taking advantage of the fact that there is more activity in this section than in the Spanish support section, browsers can now translate text into whatever language you want

Buen día a todos tengo la siguiente arquitectura

1.- Servidor Microsoft Windows Server 2022 donde tengo los servicios:

AD
DHCP
DNS
IIS <- este ya lo voy a retirar

2.- Servidor Microsoft Windows Server 2022 donde tengo el servicio:
Archivo y almacenamie

list itemnto

3.- Servidor Microsoft Windows Server 2022 donde tengo el servicio:

IIS

4.- Servidor con PFSense 2.9.0

1 Lan y 2 WAN en failover
Solo firewall
Deshabilitado el servicio de DHCP
Deshabilitado el IPv6 en las 3 interfaces
Los DNS configurados por mi son el windows server (IP privada), 8.8.8.8 y nunca he sabido por qué automáticamente se colocan las puertas de enlace de los modem como DNS

Bien entrando de lleno a mi problema es que los usuarios navegan sin ningún problema, ven videos, redes sociales, etc. pero no logran entrar a una página del Sistema de Administración Tributaria (SAT/Gobierno), les pondré la ruta que usan los usuarios:

https://www.sat.gob.mx/portal/public/home sin problema entran
Clic en tramites y servicios
https://www.sat.gob.mx/portal/public/tramites-y-servicios Sin problema entran
Clic en factura electrónica
https://www.sat.gob.mx/portal/public/tramites/factura-electronica Sin problema entran
Clic en servicios de factura se abre en esa misma pagina un menú
Clic en Consulta, cancela y recupera tus facturas
Clic en Servicio consulta y recupera
Se abre intentando abrir la página https://portalcfdi.facturaelectronica.sat.gob.mx y ahí inicia el problema
Automáticamente te redirige a la URL https://cfdiau.sat.gob.mx/nidp/wsfed/ep?id=SATUPCFDiCon&sid=1&option=credential&sid=1 (el ultimo 1 cambia dependiendo del número de pestañas que tengas abierta en esa URL)
Pero se queda pensando pensando y pensando y pensando hasta que arroja el mensaje ERR_CONNECTION_TIMED_OUT

Ahora bien lo anterior es la segunda opción para la descarga de los archivos XML, la primera opción en el programa XML en línea+ pero al tratar de descargar los XML no lo hace, marca error o se queda ciclado sin descargar los archivos

Pero si me conecto al módem sin pasar por la red local sin problema abre la página y pueden descargar los archivos que necesitan, no se ha hecho la prueba de utilizar el XML en línea+ conectado directamente al modem porque está en cliente servidor

¿Qué he hecho?

Instale desde cero el PFsense la versión 2.9.0 creyendo que era la solución (tenia la 2.8.0 con el problema) y continua el problema
Puse una regla any to any (deja salir todo y dejo entrar todo) y continua el problema
Deshabilite la revisión de los paquetes y continua el problema
Habilité solo una WAN y continua el problema, habilité la otra WAN y continua el problema, deje habilitadas las dos WAN y continua el problema, intercambie cables de red en las tarjetas de red y continua el problema
Use 3 tipos de navegadores y continua el problema
Borre cookies y restablecí configuración de los navegadores y continua el problema
Use el modo incognito (private para Edge) y continua el problema

Las personas entran a laborar a las 9:00 a.m. pero si entro a las 7:30 a.m. y entre esa hora y las 8:30 a.m. sin problema logro entrar, pero después de las 9:00 a.m. se tiene el problema

Comentario: pase varias horas revisando el problema y logré entrar y lo notifique dándome la respuesta que ellos no podían entrar, regreso a mi computadora ya tampoco podía, de nuevo reviso y hago cambios y logro entrar y lo notifique dándome la respuesta que ellos no podían entrar, regreso a mi computadora ya tampoco podía y así en varias ocasiones por lo que el problema es constante y muy pero muy rara vez se logra pasar de esta página https://cfdiau.sat.gob.mx/nidp/wsfed/ep?id=SATUPCFDiCon&sid=1&option=credential&sid=1 pero ya que lograron pasar se presenta que no pueden descargar archivos, cierran y ya no pueden entrar

Después de esta larga historia de lamentos y desesperación espero hayan podido llegar hasta aquí y puedan ayudarme orientándome con una posible solución o por lo menos una forma de demostrar a los jefes que el problema no es el firewall (creo que sí lo es porque por el modem si entran)

luckman212

In case it helps, I tried to access this page as well (I am in the US) and could not open it either.

I tried from behind my pfSense 26.07 firewall, as well as from my mobile hotspot (no pfSense at all) - both of them failed, and just a blank white page is shown.

When I tried on commandline, I also get errors - so this is a clue.

Try the command below and paste what it shows

curl -vvvv 'https://cfdiau.sat.gob.mx/nidp/wsfed/ep?id=SATUPCFDiCon&sid=1&option=credential&sid=1'

On my system, I get this

17:59:36.894410 [0-0] * TLSv1.2 (OUT), TLS alert, handshake failure (552):
17:59:36.894491 [0-0] => Send SSL data, 2 bytes (0x2)
0000: .(
17:59:36.894571 [0-0] * [SSL] SSL_connect() -> err=-1, detail=1
17:59:36.894647 [0-0] * TLS connect error: error:0A00018A:SSL routines::dh key too small
17:59:36.894745 [0-0] * [SSL] cf_connect() -> 35, done=0
17:59:36.894810 [0-0] * [HTTPS-CONNECT] connect, all attempts failed
17:59:36.894885 [0-0] * [HTTPS-CONNECT] connect -> 35, done=0
17:59:36.894954 [0-0] * [DNS] Curl_conn_connect(block=0) -> 35, done=0
17:59:36.895031 [0-0] * [DNS] Curl_conn_connect(), filter returned 35
17:59:36.895110 [0-0] * [MULTI] [CONNECTING] failed to connect [0][!DNS][!HTTPS-CONNECT]
17:59:36.895215 [0-0] * [MULTI] [CONNECTING] [PGRS-CONNECT] added 168800us
17:59:36.895299 [0-0] * [MULTI] [CONNECTING] connect failed -> 35
17:59:36.895372 [0-0] * [MULTI] [CONNECTING] multi_done: status: 35 prem: 1 done: 0
17:59:36.895467 [0-0] * [DNS] [1] shutdown async
17:59:36.895526 [0-0] * [WRITE] [OUT] done
17:59:36.895577 [0-0] * [WRITE] client_flush() -> 0
17:59:36.895638 [0-0] * [MULTI] [CONNECTING] multi_done_locked, in use=0
17:59:36.895722 [0-0] * [MULTI] [CONNECTING] multi_done, terminating conn #0 to cfdiau.sat.gob.mx:443, forbid=0, close=0, premature=1, conn_multiplex=0
17:59:36.895895 [0-0] * closing connection #0
17:59:36.897544 [0-0] * [MULTI] [CONNECTING] -> [COMPLETED]
17:59:36.897622 [0-0] * [MULTI] [COMPLETED] [PGRS-PRETRANSFER] added 303089us
17:59:36.897707 [0-0] * [MULTI] [COMPLETED] [PGRS-POSTRANSFER] added 303174us
17:59:36.897791 [0-0] * [MULTI] [COMPLETED] [PGRS-STARTTRANSFER] added 303259us
17:59:36.897880 [0-0] * [MULTI] [COMPLETED] -> [MSGSENT]
17:59:36.897945 [0-0] * [MULTI] [COMPLETED] removed from multi, mid=1, running=0, total=1
curl: (35) TLS connect error: error:0A00018A:SSL routines::dh key too small
17:59:36.898197 [0-0] * [DNS] [1] destroy async

Important part I think is this:

TLS connect error: error:0A00018A:SSL routines::dh key too small
[SSL] cf_connect() -> 35, done=0
[HTTPS-CONNECT] connect, all attempts failed

So to me at least, looks like a certificate error on that webserver.

also: https://www.ssllabs.com/ssltest/analyze.html?d=cfdiau.sat.gob.mx says:

johnpoz

@luckman212 yeah their ssl is broken..

Bob.Dig

@Belcebu-Gdl said in I don't know if it's pfSense or the server outside the local network.:

and I’m taking advantage of

Next time, translate it yourself.

Belcebu Gdl

@luckman212 said in I don't know if it's pfSense or the server outside the local network.:

In case it helps, I tried to access this page as well (I am in the US) and could not open it either.

I tried from behind my pfSense 26.07 firewall, as well as from my mobile hotspot (no pfSense at all) - both of them failed, and just a blank white page is shown.

When I tried on commandline, I also get errors - so this is a clue.

Try the command below and paste what it shows

Thank you for your help,

I'll post the output of the curl command here, but for now I have access to the page. There are times when I have access (4:30 p.m. to 8:00 a.m.) and other times when I don't (from 8:30 a.m. to 4:00 p.m.). Tomorrow I'll post the output from when I don't have access

curl -vvvv "https://cfdiau.sat.gob.mx/nidp/wsfed/ep?id=SATUPCFDiCon&sid=0&option=credential&sid=1"
15:49:40.835000 [0-x] == Info: [MULTI] [INIT] added, transfers=1
15:49:40.851000 [0-x] == Info: [MULTI] [INIT] multi_perform(running=1)
15:49:40.861000 [0-x] == Info: [MULTI] [INIT] -> [SETUP]
15:49:40.866000 [0-x] == Info: [MULTI] [SETUP] -> [CONNECT]
15:49:40.872000 [0-x] == Info: [READ] client_reset, clear readers
15:49:40.876000 [0-0] == Info: [MULTI] [CONNECT] [CPOOL] added connection 0. The cache now contains 1 members
15:49:40.881000 [0-0] == Info: [MULTI] [CONNECT] -> [RESOLVING]
15:49:40.883000 [0-0] == Info: [MULTI] [RESOLVING] multi_wait pollset[fd=308 IN], timeouts=1
15:49:40.885000 [0-0] == Info: [MULTI] [RESOLVING] multi_perform(running=1)
15:49:40.887000 [0-0] == Info: [MULTI] [RESOLVING] Curl_multi_will_close fd=308
15:49:40.889000 [0-0] == Info: Host cfdiau.sat.gob.mx:443 was resolved.
15:49:40.891000 [0-0] == Info: IPv6: (none)
15:49:40.892000 [0-0] == Info: IPv4: 200.33.84.45
15:49:40.894000 [0-0] == Info: [HTTPS-CONNECT] adding wanted h2
15:49:40.895000 [0-0] == Info: [HTTPS-CONNECT] added
15:49:40.896000 [0-0] == Info: [MULTI] [RESOLVING] -> [CONNECTING]
15:49:40.898000 [0-0] == Info: [HTTPS-CONNECT] connect, init
15:49:40.899000 [0-0] == Info: [HAPPY-EYEBALLS] created ipv4 (timeout 299967ms)
15:49:40.902000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 starting (timeout=299965ms)
15:49:40.904000 [0-0] == Info:   Trying 200.33.84.45:443...
15:49:40.905000 [0-0] == Info: [TCP] cf_socket_open() -> 0, fd=308
15:49:40.907000 [0-0] == Info: [TCP] local address 0.0.0.0 port 57907...
15:49:40.909000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
15:49:40.911000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
15:49:40.913000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
15:49:40.915000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
15:49:40.917000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
15:49:40.919000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
15:49:40.921000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
15:49:40.923000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
15:49:40.925000 [0-0] == Info: [TCP] connected
15:49:40.926000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=1
15:49:40.928000 [0-0] == Info: [HAPPY-EYEBALLS] Connected to cfdiau.sat.gob.mx (200.33.84.45) port 443
15:49:40.931000 [0-0] == Info: [SSL] cf_connect()
15:49:40.932000 [0-0] == Info: [SSLS] find peer slot for cfdiau.sat.gob.mx:443:IMPL-Schannel:G among 25 slots
15:49:40.934000 [0-0] == Info: [SSLS] peer not found for cfdiau.sat.gob.mx:443:IMPL-Schannel:G
15:49:40.937000 [0-0] == Info: [SSLS] No cached session for 'cfdiau.sat.gob.mx:443:IMPL-Schannel:G'
15:49:40.940000 [0-0] == Info: schannel: disabled automatic use of client certificate
15:49:40.943000 [0-0] == Info: ALPN: curl offers http/1.1
15:49:40.944000 [0-0] == Info: [TCP] send(len=302) -> 302, err=0
15:49:40.946000 [0-0] == Info: [TCP] recv(len=4096) -> -1, err=81
15:49:40.948000 [0-0] == Info: [SSL] cf_connect() -> 0, done=0
15:49:40.949000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
15:49:40.952000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
15:49:40.955000 [0-0] == Info: [SSL] adjust_pollset, POLLIN fd=308
15:49:40.957000 [0-0] == Info: [TCP] adjust_pollset, !active, POLLIN fd=308
15:49:40.959000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
15:49:40.961000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 IN], timeouts=0
15:49:40.964000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
15:49:40.966000 [0-0] == Info: [SSL] cf_connect()
15:49:40.968000 [0-0] == Info: [TCP] recv(len=4096) -> 3409, err=0
15:49:40.971000 [0-0] == Info: [TCP] send(len=190) -> 190, err=0
15:49:40.973000 [0-0] == Info: [SSL] cf_connect() -> 0, done=0
15:49:40.975000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
15:49:40.977000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
15:49:40.979000 [0-0] == Info: [SSL] adjust_pollset, POLLIN fd=308
15:49:40.983000 [0-0] == Info: [TCP] adjust_pollset, !active, POLLIN fd=308
15:49:40.985000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
15:49:40.987000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 IN], timeouts=0
15:49:40.990000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
15:49:40.992000 [0-0] == Info: [SSL] cf_connect()
15:49:40.994000 [0-0] == Info: [TCP] recv(len=4096) -> 51, err=0
15:49:40.998000 [0-0] == Info: ALPN: server did not agree on a protocol. Uses default.
15:49:41.001000 [0-0] == Info: [SSLS] find peer slot for cfdiau.sat.gob.mx:443:IMPL-Schannel:G among 25 slots
15:49:41.004000 [0-0] == Info: [SSLS] peer not found for cfdiau.sat.gob.mx:443:IMPL-Schannel:G
15:49:41.006000 [0-0] == Info: [SSL] cf_connect() -> 0, done=1
15:49:41.008000 [0-0] == Info: [HTTPS-CONNECT] connect+handshake h2: 108ms, 1st data: 65ms
15:49:41.011000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=1
15:49:41.014000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=1
15:49:41.016000 [0-0] == Info: Connected to cfdiau.sat.gob.mx (200.33.84.45) port 443
15:49:41.020000 [0-0] == Info: using HTTP/1.x
15:49:41.021000 [0-0] == Info: [MULTI] [CONNECTING] -> [PROTOCONNECT]
15:49:41.023000 [0-0] == Info: [MULTI] [PROTOCONNECT] -> [DO]
15:49:41.024000 [0-0] == Info: [TCP] send(len=169) -> 169, err=0
15:49:41.027000 [0-0] => Send header, 140 bytes (0x8c)
0000: GET /nidp/wsfed/ep?id=SATUPCFDiCon&sid=0&option=credential&sid=1
0040:  HTTP/1.1
004b: Host: cfdiau.sat.gob.mx
0064: User-Agent: curl/8.13.0
007d: Accept: */*
008a:
15:49:41.034000 [0-0] == Info: [MULTI] [DO] -> [DID]
15:49:41.037000 [0-0] == Info: [MULTI] [DID] -> [PERFORMING]
15:49:41.039000 [0-0] == Info: [TCP] recv(len=103424) -> -1, err=81
15:49:41.041000 [0-0] == Info: [SSL] cf_recv(len=102400) -> -1, 81
15:49:41.042000 [0-0] == Info: Request completely sent off
15:49:41.044000 [0-0] == Info: [MULTI] [PERFORMING] multi_wait pollset[fd=308 IN], timeouts=0
15:49:41.053000 [0-0] == Info: [MULTI] [PERFORMING] multi_perform(running=1)
15:49:41.054000 [0-0] == Info: [TCP] recv(len=103424) -> 509, err=0
15:49:41.057000 [0-0] == Info: [SSL] cf_recv(len=102400) -> 480, 0
15:49:41.058000 [0-0] <= Recv header, 15 bytes (0xf)
0000: HTTP/1.1 200
15:49:41.060000 [0-0] == Info: [WRITE] [OUT] wrote 15 header bytes -> 15
15:49:41.063000 [0-0] == Info: [WRITE] [PAUSE] writing 15/15 bytes of type c -> 0
15:49:41.065000 [0-0] == Info: [WRITE] download_write header(type=c, blen=15) -> 0
15:49:41.068000 [0-0] == Info: [WRITE] client_write(type=c, len=15) -> 0
15:49:41.070000 [0-0] <= Recv header, 87 bytes (0x57)
0000: Set-Cookie: JSESSIONID=197CC247CB2506B628CEE97A91C0C738; Path=/n
0040: idp; Secure; HttpOnly
15:49:41.073000 [0-0] == Info: [WRITE] header_collect pushed(type=1, len=87) -> 0
15:49:41.076000 [0-0] == Info: [WRITE] [OUT] wrote 87 header bytes -> 87
15:49:41.080000 [0-0] == Info: [WRITE] [PAUSE] writing 87/87 bytes of type 4 -> 0
15:49:41.083000 [0-0] == Info: [WRITE] download_write header(type=4, blen=87) -> 0
15:49:41.085000 [0-0] == Info: [WRITE] client_write(type=4, len=87) -> 0
15:49:41.087000 [0-0] <= Recv header, 99 bytes (0x63)
0000: Set-Cookie: UrnNovellNidpClusterMemberId=~03~02fbf~1B~17~14ps~7B
0040: ~07; Path=/nidp; Secure; HttpOnly
15:49:41.091000 [0-0] == Info: [WRITE] header_collect pushed(type=1, len=99) -> 0
15:49:41.095000 [0-0] == Info: [WRITE] [OUT] wrote 99 header bytes -> 99
15:49:41.097000 [0-0] == Info: [WRITE] [PAUSE] writing 99/99 bytes of type 4 -> 0
15:49:41.100000 [0-0] == Info: [WRITE] download_write header(type=4, blen=99) -> 0
15:49:41.102000 [0-0] == Info: [WRITE] client_write(type=4, len=99) -> 0
15:49:41.104000 [0-0] <= Recv header, 18 bytes (0x12)
0000: Pragma: No-cache
15:49:41.106000 [0-0] == Info: [WRITE] header_collect pushed(type=1, len=18) -> 0
15:49:41.109000 [0-0] == Info: [WRITE] [OUT] wrote 18 header bytes -> 18
15:49:41.111000 [0-0] == Info: [WRITE] [PAUSE] writing 18/18 bytes of type 4 -> 0
15:49:41.113000 [0-0] == Info: [WRITE] download_write header(type=4, blen=18) -> 0
15:49:41.114000 [0-0] == Info: [WRITE] client_write(type=4, len=18) -> 0
15:49:41.117000 [0-0] <= Recv header, 25 bytes (0x19)
0000: Cache-Control: no-cache
15:49:41.119000 [0-0] == Info: [WRITE] header_collect pushed(type=1, len=25) -> 0
15:49:41.122000 [0-0] == Info: [WRITE] [OUT] wrote 25 header bytes -> 25
15:49:41.124000 [0-0] == Info: [WRITE] [PAUSE] writing 25/25 bytes of type 4 -> 0
15:49:41.128000 [0-0] == Info: [WRITE] download_write header(type=4, blen=25) -> 0
15:49:41.130000 [0-0] == Info: [WRITE] client_write(type=4, len=25) -> 0
15:49:41.133000 [0-0] <= Recv header, 19 bytes (0x13)
0000: Content-Length: 0
15:49:41.135000 [0-0] == Info: [WRITE] header_collect pushed(type=1, len=19) -> 0
15:49:41.138000 [0-0] == Info: [WRITE] [OUT] wrote 19 header bytes -> 19
15:49:41.140000 [0-0] == Info: [WRITE] [PAUSE] writing 19/19 bytes of type 4 -> 0
15:49:41.144000 [0-0] == Info: [WRITE] download_write header(type=4, blen=19) -> 0
15:49:41.145000 [0-0] == Info: [WRITE] client_write(type=4, len=19) -> 0
15:49:41.148000 [0-0] <= Recv header, 37 bytes (0x25)
0000: Date: Mon, 07 Sep 2026 21:49:41 GMT
15:49:41.151000 [0-0] == Info: [WRITE] header_collect pushed(type=1, len=37) -> 0
15:49:41.152000 [0-0] == Info: [WRITE] [OUT] wrote 37 header bytes -> 37
15:49:41.155000 [0-0] == Info: [WRITE] [PAUSE] writing 37/37 bytes of type 4 -> 0
15:49:41.158000 [0-0] == Info: [WRITE] download_write header(type=4, blen=37) -> 0
15:49:41.161000 [0-0] == Info: [WRITE] client_write(type=4, len=37) -> 0
15:49:41.164000 [0-0] <= Recv header, 178 bytes (0xb2)
0000: Set-Cookie: F5-PRO-CFDIAU-443=!1c7f8R0Wj7McBaod9moCvgRg40uQNaZW1
0040: 3IyBq28L17kRe/sZeYiRI6NtcMIISs92c3RLRzwCY09uIM=; expires=Mon, 07
0080: -Sep-2026 22:32:39 GMT; path=/; Httponly; Secure
15:49:41.170000 [0-0] == Info: [WRITE] header_collect pushed(type=1, len=178) -> 0
15:49:41.176000 [0-0] == Info: [WRITE] [OUT] wrote 178 header bytes -> 178
15:49:41.177000 [0-0] == Info: [WRITE] [PAUSE] writing 178/178 bytes of type 4 -> 0
15:49:41.179000 [0-0] == Info: [WRITE] download_write header(type=4, blen=178) -> 0
15:49:41.182000 [0-0] == Info: [WRITE] client_write(type=4, len=178) -> 0
15:49:41.185000 [0-0] <= Recv header, 2 bytes (0x2)
0000:
15:49:41.188000 [0-0] == Info: [WRITE] header_collect pushed(type=1, len=2) -> 0
15:49:41.192000 [0-0] == Info: [WRITE] [OUT] wrote 2 header bytes -> 2
15:49:41.194000 [0-0] == Info: [WRITE] [PAUSE] writing 2/2 bytes of type 4 -> 0
15:49:41.196000 [0-0] == Info: [WRITE] download_write header(type=4, blen=2) -> 0
15:49:41.198000 [0-0] == Info: [WRITE] client_write(type=4, len=2) -> 0
15:49:41.202000 [0-0] == Info: [WRITE] xfer_write_resp(len=480, eos=0) -> 0
15:49:41.203000 [0-0] == Info: [MULTI] [PERFORMING] -> [DONE]
15:49:41.206000 [0-0] == Info: [MULTI] [DONE] multi_done: status: 0 prem: 0 done: 0
15:49:41.209000 [0-0] == Info: [WRITE] [OUT] done
15:49:41.211000 [0-0] == Info: [READ] client_reset, clear readers
15:49:41.212000 [0-0] == Info: Connection #0 to host cfdiau.sat.gob.mx left intact
15:49:41.214000 [0-0] == Info: [MULTI] [DONE] -> [COMPLETED]
15:49:41.216000 [0-0] == Info: [MULTI] [COMPLETED] -> [MSGSENT]
15:49:41.218000 [0-0] == Info: [MULTI] [COMPLETED] removed, transfers=0

image url)

Belcebu Gdl

@johnpoz said in I don't know if it's pfSense or the server outside the local network.:

yeah their ssl is broken..

Thank you for your observation.

But if it were a faulty SSL certificate, would it always happen or not? I've checked and the error occurs between 8:30 and 16:00, and the problem doesn't happen between 16:00 and 8:00.

Belcebu Gdl

@luckman212

This is the result of the curl command when the page flags the err_connection_timed_out error or leaves the page blank

curl -vvvv "https://cfdiau.sat.gob.mx/nidp/wsfed/ep?id=SATUPCFDiCon&sid=0&option=credential&sid=1"
09:23:28.488000 [0-x] == Info: [MULTI] [INIT] added, transfers=1
09:23:28.498000 [0-x] == Info: [MULTI] [INIT] multi_perform(running=1)
09:23:28.504000 [0-x] == Info: [MULTI] [INIT] -> [SETUP]
09:23:28.509000 [0-x] == Info: [MULTI] [SETUP] -> [CONNECT]
09:23:28.513000 [0-x] == Info: [READ] client_reset, clear readers
09:23:28.516000 [0-0] == Info: [MULTI] [CONNECT] [CPOOL] added connection 0. The cache now contains 1 members
09:23:28.520000 [0-0] == Info: [MULTI] [CONNECT] -> [RESOLVING]
09:23:28.522000 [0-0] == Info: [MULTI] [RESOLVING] multi_wait pollset[fd=308 IN], timeouts=1
09:23:28.524000 [0-0] == Info: [MULTI] [RESOLVING] multi_perform(running=1)
09:23:28.526000 [0-0] == Info: [MULTI] [RESOLVING] Curl_multi_will_close fd=308
09:23:28.528000 [0-0] == Info: Host cfdiau.sat.gob.mx:443 was resolved.
09:23:28.530000 [0-0] == Info: IPv6: (none)
09:23:28.531000 [0-0] == Info: IPv4: 200.33.84.45
09:23:28.532000 [0-0] == Info: [HTTPS-CONNECT] adding wanted h2
09:23:28.534000 [0-0] == Info: [HTTPS-CONNECT] added
09:23:28.536000 [0-0] == Info: [MULTI] [RESOLVING] -> [CONNECTING]
09:23:28.537000 [0-0] == Info: [HTTPS-CONNECT] connect, init
09:23:28.539000 [0-0] == Info: [HAPPY-EYEBALLS] created ipv4 (timeout 299970ms)
09:23:28.541000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 starting (timeout=299968ms)
09:23:28.543000 [0-0] == Info: Trying 200.33.84.45:443...
09:23:28.544000 [0-0] == Info: [TCP] cf_socket_open() -> 0, fd=308
09:23:28.546000 [0-0] == Info: [TCP] local address 0.0.0.0 port 62956...
09:23:28.548000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:28.550000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:28.552000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:28.554000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:28.556000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:28.558000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:28.561000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:29.564000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:29.567000 [0-0] == Info: [TCP] not connected yet
09:23:29.570000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:29.574000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:29.577000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:29.581000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:29.585000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:29.589000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:29.592000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:30.595000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:30.606000 [0-0] == Info: [TCP] not connected yet
09:23:30.613000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:30.624000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:30.629000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:30.635000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:30.639000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:30.642000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:30.644000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:31.647000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:31.650000 [0-0] == Info: [TCP] not connected yet
09:23:31.652000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:31.656000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:31.659000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:31.662000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:31.666000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:31.669000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:31.672000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:32.675000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:32.686000 [0-0] == Info: [TCP] not connected yet
09:23:32.692000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:32.702000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:32.708000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:32.713000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:32.717000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:32.719000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:32.722000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:33.727000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:33.738000 [0-0] == Info: [TCP] not connected yet
09:23:33.747000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:33.757000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:33.764000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:33.769000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:33.771000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:33.774000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:33.779000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:34.781000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:34.785000 [0-0] == Info: [TCP] not connected yet
09:23:34.787000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:34.792000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:34.795000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:34.800000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:34.803000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:34.806000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:34.810000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:35.815000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:35.825000 [0-0] == Info: [TCP] not connected yet
09:23:35.833000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:35.846000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:35.853000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:35.861000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:35.867000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:35.871000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:35.874000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:36.877000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:36.888000 [0-0] == Info: [TCP] not connected yet
09:23:36.898000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:36.910000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:36.917000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:36.922000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:36.925000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:36.928000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:36.930000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:37.933000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:37.943000 [0-0] == Info: [TCP] not connected yet
09:23:37.952000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:37.964000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:37.971000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:37.979000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:37.986000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:37.989000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:37.993000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:38.997000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:39.008000 [0-0] == Info: [TCP] not connected yet
09:23:39.015000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:39.027000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:39.035000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:39.042000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:39.049000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:39.053000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:39.056000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:40.061000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:40.071000 [0-0] == Info: [TCP] not connected yet
09:23:40.080000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:40.092000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:40.102000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:40.107000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:40.115000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:40.119000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:40.122000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:41.127000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:41.137000 [0-0] == Info: [TCP] not connected yet
09:23:41.147000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:41.158000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:41.166000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:41.170000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:41.174000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:41.178000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:41.180000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:42.183000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:42.193000 [0-0] == Info: [TCP] not connected yet
09:23:42.201000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:42.213000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:42.223000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:42.230000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:42.238000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:42.242000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:42.245000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:43.251000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:43.254000 [0-0] == Info: [TCP] not connected yet
09:23:43.257000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:43.261000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:43.264000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:43.270000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:43.273000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:43.276000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:43.280000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:44.282000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:44.293000 [0-0] == Info: [TCP] not connected yet
09:23:44.302000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:44.313000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:44.321000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:44.326000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:44.330000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:44.333000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:44.336000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:45.340000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:45.351000 [0-0] == Info: [TCP] not connected yet
09:23:45.360000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:45.370000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:45.375000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:45.382000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:45.386000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:45.389000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:45.394000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:46.396000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:46.407000 [0-0] == Info: [TCP] not connected yet
09:23:46.414000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:46.427000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:46.436000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:46.446000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:46.452000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:46.456000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:46.459000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:47.462000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:47.472000 [0-0] == Info: [TCP] not connected yet
09:23:47.480000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:47.492000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:47.502000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:47.508000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:47.516000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:47.521000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:47.524000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:48.530000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:48.541000 [0-0] == Info: [TCP] not connected yet
09:23:48.550000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 0, connected=0
09:23:48.560000 [0-0] == Info: [HTTPS-CONNECT] connect -> 0, done=0
09:23:48.569000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 0, done=0
09:23:48.575000 [0-0] == Info: [TCP] adjust_pollset, !connected, POLLOUT fd=308
09:23:48.582000 [0-0] == Info: [HAPPY-EYEBALLS] adjust_pollset -> 1 socks
09:23:48.585000 [0-0] == Info: [HTTPS-CONNECT] adjust_pollset -> 1 socks
09:23:48.587000 [0-0] == Info: [MULTI] [CONNECTING] multi_wait pollset[fd=308 OUT], timeouts=0
09:23:49.549000 [0-0] == Info: [MULTI] [CONNECTING] multi_perform(running=1)
09:23:49.556000 [0-0] == Info: connect to 200.33.84.45 port 443 from 0.0.0.0 port 62956 failed: Timed out
09:23:49.573000 [0-0] == Info: [MULTI] [CONNECTING] Curl_multi_will_close fd=308
09:23:49.586000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 connect -> 7, connected=0
09:23:49.593000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 done
09:23:49.597000 [0-0] == Info: [HAPPY-EYEBALLS] all eyeballers failed
09:23:49.604000 [0-0] == Info: [HAPPY-EYEBALLS] ipv4 assess started=1, result=7
09:23:49.608000 [0-0] == Info: Failed to connect to cfdiau.sat.gob.mx port 443 after 21047 ms: Could not connect to server
09:23:49.612000 [0-0] == Info: [HTTPS-CONNECT] connect, all attempts failed
09:23:49.614000 [0-0] == Info: [HTTPS-CONNECT] connect -> 28, done=0
09:23:49.618000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(block=0) -> 28, done=0
09:23:49.621000 [0-0] == Info: [HTTPS-CONNECT] Curl_conn_connect(), filter returned 28
09:23:49.623000 [0-0] == Info: [MULTI] [CONNECTING] multi_done: status: 28 prem: 1 done: 0
09:23:49.626000 [0-0] == Info: [WRITE] [OUT] done
09:23:49.627000 [0-0] == Info: [MULTI] [CONNECTING] multi_done, not reusing connection=0, forbid=0, close=0, premature=1, conn_multiplex=0
09:23:49.633000 [0-0] == Info: closing connection #0
09:23:49.634000 [0-0] == Info: [MULTI] [CONNECTING] -> [COMPLETED]
09:23:49.636000 [0-0] == Info: [MULTI] [COMPLETED] -> [MSGSENT]
09:23:49.638000 [0-0] == Info: [MULTI] [COMPLETED] removed, transfers=0
curl: (28) Failed to connect to cfdiau.sat.gob.mx port 443 after 21047 ms: Could not connect to server

luckman212

@Belcebu-Gdl that last output looks like more of a plain old connect failure and nothing to do with the SSL certs. I just tested and I am able to connect to 200.33.84.45:443 so either your path is down, being blocked or something's wrong with your outbound NAT or firewall rules.

what do the following look like

your outbound NAT mode & rules (screenshot)
your LAN firewall rules (screenshot)
output of traceroute -n -w1 200.33.84.45

johnpoz

@Belcebu-Gdl said in I don't know if it's pfSense or the server outside the local network.:

cfdiau.sat.gob.mx

https://cfdiau.sat.gob.mx

while a bit slow does come up and show this

But ssl tester is still showing failure

https://www.ssllabs.com/ssltest/analyze.html?d=cfdiau.sat.gob.mx

Assessment failed: Unable to connect to the server

Bob.Dig

Now I want a .mx domain for my mailserver.

Belcebu Gdl

@luckman212 said in I don't know if it's pfSense or the server outside the local network.:

@Belcebu-Gdl that last output looks like more of a plain old connect failure and nothing to do with the SSL certs. I just tested and I am able to connect to 200.33.84.45:443 so either your path is down, being blocked or something's wrong with your outbound NAT or firewall rules.

what do the following look like

your outbound NAT mode & rules (screenshot)

your LAN firewall rules (screenshot)

output of traceroute -n -w1 200.33.84.45

1) your outbound NAT mode & rules (screenshot)

2) your LAN firewall rules (screenshot)

WAN

LAN

WAN2 (failover)

The rules shown in the images are test rules; they are not final (I will remove them at some point)

3) output of traceroute -n -w1 200.33.84.45

The last hop reached is always 189.202.216.238, whether via WAN, WAN2, or directly to the modem.

Additional information

DNS 1 Modem WAN It appeared automatically
DNS 2 Modem WAN2 It appeared automatically
DNS 3 Microsoft Windows Server DNS (It is configured on the pfsense)
DNS 4 Obvious (It is configured on the pfsense)

Belcebu Gdl

@johnpoz

It shows up like this with this URL, but the correct URL is

https://cfdiau.sat.gob.mx/nidp/wsfed/ep?id=SATUPCFDiCon&sid=0&option=credential&sid=1

Belcebu Gdl

Thanks to everyone for your help; it seems the problem lies with the external server. Users from other locations have been reporting the same issue