Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Slow speed behind pfsense

    NAT
    6
    10
    5660
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      stephon last edited by

      Hello all

      I have a pfsense 1.2.3 installed on a server with 2 broadcom NICs.
      The configuration as below:

      public IP  <–-> pfSense <---> private IP

      In the private side, a machine named A wants to connect a SMTP server outside the pfSense and send a mail with 300k attachment, but spends about 2 minutes to send. (1kB/s average)

      Another machine named B has public IP, doing the same thing as A, only spends 1 seconds to send.

      top -SH & netstat -ni don't see anything irregular.

      What the situation would it be? and how to solve it?

      (Note: my pfSense has run squid, but the loading is very low)

      Thanks a lot

      1 Reply Last reply Reply Quote 0
      • S
        stephon last edited by

        Hello
        Does anyone know about it?

        Thanks a lot

        1 Reply Last reply Reply Quote 0
        • GruensFroeschli
          GruensFroeschli last edited by

          So are you currently running squid?
          If yes: search the forum for "slow internet with squid". There are dozens of threads about this.

          We do what we must, because we can.

          Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

          1 Reply Last reply Reply Quote 0
          • S
            stephon last edited by

            Hello

            Yes, I've running squid on it,
            but it seems fine to download a file behind pfSense, it usually runs at 3~4MB/s
            but while send a mail with 300k attachment to the smtp server outside pfSense,
            it runs about 5~7sec to finish a mail

            this thing confuses me a while  ???

            1 Reply Last reply Reply Quote 0
            • Cry Havok
              Cry Havok last edited by

              Can you see the dialog or log messages between your SMTP device and the remote server?  The problem may be with one of those, not pfSense.

              1 Reply Last reply Reply Quote 0
              • S
                stephon last edited by

                Hello Cry

                Seems not the problem of SMTP server
                while I disable firewall and use public IP to send mail
                it only spends < 1s to finish

                there is nothing wrong about nat settings…

                and I've checked if this would be a MTU mismatch problem, but seems not
                all pfsense, machines inside pfsense, and SMTP server were the same MTU as 1500

                1 Reply Last reply Reply Quote 0
                • D
                  danswartz last edited by

                  Without seeing a packet capture during a slow SMTP send, it's hard to comment.

                  1 Reply Last reply Reply Quote 0
                  • L
                    leoalfa09 last edited by

                    Try using your pfsense box without other services like squid, disable all and try???

                    1 Reply Last reply Reply Quote 0
                    • C
                      cmb last edited by

                      @danswartz:

                      Without seeing a packet capture during a slow SMTP send, it's hard to comment.

                      ^ this. If you can attach a pcap of only that SMTP traffic we can probably tell you why. My first guess is you have a PMTUD problem of some sort. Dropping the MTU on your mail server to 1400 is one way to test that.

                      1 Reply Last reply Reply Quote 0
                      • S
                        stephon last edited by

                        Thanks all,
                        I found it might be a MTU problem while I tuning the MTU down on mail server….

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post