Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Services -> loadbalancer for smtp issues

    Scheduled Pinned Locked Moved General pfSense Questions
    1 Posts 1 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D Offline
      dullyouth
      last edited by

      First off, i'm running pfsense 2.0-rc1

      WAN (wan)                -> bge0      -> xxx.xxx.83.252
        LAN (lan)                -> bge1      -> NONE
        OPT1 (opt1)              -> em0        -> 10.0.0.200 (crossover to secondary fw)

      I'm running pfsense inline(i think that's the right term) and was wondering if it were possible to set up a load balancer between 83.252 and other ips on the same 83.0/24 subnet when only assigning an address to the wan.

      The network has 7 class C's in total, and no "internal lan" as they are all accessable via the net, pfsense is mostly used in conjunction with snort as an IDS(recently upgraded from obsd 4.1) but i'd like to use it for load balancing our mail servers as well.

      I'm getting TCP SYN_CLOSED when i attempt to connect to the loadbalancer listener

      results of pfctl -s state
      all tcp xxx.xxx.83.181:25 <- xxx.xxx.83.252:25 <- OFF-NETWORK-IP:34112      CLOSED:SYN_SENT
      all tcp OFF-NETWORK-IP:34112 -> xxx.xxx.83.181:25      SYN_SENT:CLOSED

      83.181 is the smtp server.
      OFF-NETWORK-IP is a remote server connecting to wanip/load balancer listener

      relayd.log
      Feb 15 11:12:40 fw05 relayd[2593]: host xxx.xxx.83.181, check icmp (0ms), state unknown -> up, availability 100.00%
      Feb 15 11:12:50 fw05 relayd[2454]: table smtp: 1 added, 0 deleted, 0 changed, 0 killed

      relayd.conf
      log updates
      table <smtp>{ xxx.xxx.83.181 retry 2 }
      redirect "smtp" {
        listen on xxx.xxx.83.252 port 25
        forward to <smtp>port 25 check icmp timeout 1000
      }

      I may be completely off base here as i'm primarily the solaris/nix admin and web developer, my network-fu is somewhat minimal.
      Any information, or a blatant "you have no clue what you're doing/it will not work" would be greatly appreciated.</smtp></smtp>

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.