MultiWan grouping problem when open webmail

[ahmed.bayoumi]

I have a Pfsense using 3 multi-WAN and one LAN and use a group default gateway in order to sum up the speed.
I can't login on email through web cpanel, a message shows every time entering the username and password "Your IP address has changed". Please log in again" and never log me in, is there is anyway to fix the session using specific address to go through a specific wan

[phil.davis]

I make a failover gateway group (one with a particular WAN preferred) then put rule/s on LAN to pass traffic to the relevant cPanel webMail server (and/or bank, or…) to that gateway group.
You can make multiple failover gateway groups with different tier 1 WANs and then make rules to direct different stuff to different gateway groups, if needed to do "poor mans load balancing" of that traffic.
Then the traffic sticks to 1 WAN, and only changes if that WAN goes down.

[zerokool]

@phil.davis:

I make a failover gateway group (one with a particular WAN preferred) then put rule/s on LAN to pass traffic to the relevant cPanel webMail server (and/or bank, or…) to that gateway group.
You can make multiple failover gateway groups with different tier 1 WANs and then make rules to direct different stuff to different gateway groups, if needed to do "poor mans load balancing" of that traffic.
Then the traffic sticks to 1 WAN, and only changes if that WAN goes down.

can you suggest how to do that?
do I do 1 wan for https access? set it at tier 2 and do a rule for https to the tier2 wan?

[phil.davis]

a) Make gateway group "FussySitesGWG" - WAN1 Tier 1, WAN2 Tier2
b) Make Alias "FussySites" - add the FQDN of those sites (mymailserver.mycompany.com mybank.com …)
c) Put a rule up the top of LAN (where it will apply before more general rules):
Pass protocol all source LANnet destination FussySites gateway FussySitesGWG

You can make the rule more restrictive if you like - just protocol TCP, just destination HTTP and HTTPS ports. In this case it is not a security thing. If there happen to be other services on other ports at those sites you probably do not care if they are matched by this rule or a more general one further down.

[digital_janitor]

Have you tried using System: Advanced: Miscellaneous: Load Balancing: Use sticky connections?

[ahmed.bayoumi]

sticky connections worked perfectly but Alias and firewall rule doesn't work with me, thanks for all

[kapara]

create alias group with url.
Add rule to top of LAN allowing any traffic to destination alias and specify which gateway to use.