Services -> loadbalancer for smtp issues



  • First off, i'm running pfsense 2.0-rc1

    WAN (wan)                -> bge0      -> xxx.xxx.83.252
      LAN (lan)                -> bge1      -> NONE
      OPT1 (opt1)              -> em0        -> 10.0.0.200 (crossover to secondary fw)

    I'm running pfsense inline(i think that's the right term) and was wondering if it were possible to set up a load balancer between 83.252 and other ips on the same 83.0/24 subnet when only assigning an address to the wan.

    The network has 7 class C's in total, and no "internal lan" as they are all accessable via the net, pfsense is mostly used in conjunction with snort as an IDS(recently upgraded from obsd 4.1) but i'd like to use it for load balancing our mail servers as well.

    I'm getting TCP SYN_CLOSED when i attempt to connect to the loadbalancer listener

    results of pfctl -s state
    all tcp xxx.xxx.83.181:25 <- xxx.xxx.83.252:25 <- OFF-NETWORK-IP:34112      CLOSED:SYN_SENT
    all tcp OFF-NETWORK-IP:34112 -> xxx.xxx.83.181:25      SYN_SENT:CLOSED

    83.181 is the smtp server.
    OFF-NETWORK-IP is a remote server connecting to wanip/load balancer listener

    relayd.log
    Feb 15 11:12:40 fw05 relayd[2593]: host xxx.xxx.83.181, check icmp (0ms), state unknown -> up, availability 100.00%
    Feb 15 11:12:50 fw05 relayd[2454]: table smtp: 1 added, 0 deleted, 0 changed, 0 killed

    relayd.conf
    log updates
    table <smtp>{ xxx.xxx.83.181 retry 2 }
    redirect "smtp" {
      listen on xxx.xxx.83.252 port 25
      forward to <smtp>port 25 check icmp timeout 1000
    }

    I may be completely off base here as i'm primarily the solaris/nix admin and web developer, my network-fu is somewhat minimal.
    Any information, or a blatant "you have no clue what you're doing/it will not work" would be greatly appreciated.</smtp></smtp>


Log in to reply