Problems with some HTTPS Websites / Intel® PRO/1000 PT Dual Port Server Adapter

mwagner

Hi,

I have remarked problems after upgrading pfsense from 2.1.3 to 2.2. I couldn’t open correctly some websites on some interfaces for example:
https://www.mozilla.org/
https://de.yahoo.com/
…………..
On Firefox, only the top of the website was showing. The rest was white. Iexplorer didn’t show anything.

Other sites where working:
https://www.google.de

I have pfsense running on a DELL Power EDGE T20 (Pentium G3220, 4GB RAM ECC) with additional two RJ45 Ports on an Intel PRO/1000 PT Dual Port Server Adapter.

WAN and LAN are on VLAN on different ports of the Dual Port Server Adapter. I have an additional OPT1 on the internal mainboard RJ45.

I had only problems to open the websites on the LAN. To open the same websites on the OPT1 worked well. I have resolved this problem for the moment by switching the LAN network from the Dual Port Server Adapter to a VLAN on the internal mainboard RJ45. WAN is still on the Dual Port Server Adapter.

So logically the problems is related to the Intel PRO/1000 PT Dual Port Server Adapter.

I have already checked a troubleshooting the the pfsense website without change: https://doc.pfsense.org/index.php/Unable_to_Access_Some_Websites

Has anyone an advice what I can do or check or something?

Tikimotel

I can not imagine your problem being related to the dual intel adapter itself.
Are your running a proxy? Any customization in the loader.conf at all?

Maybe it is a upgrade issue when upgrading from a lower version of pfsense to the current 2.2 release.

mwagner

There is no proxy on the system and I haven't customized the loader.conf.

When I switch back LAN to the Dual Port Server Adapter, the problem returns.

heper

https://forum.pfsense.org/index.php?topic=88559.0

Tikimotel

I've upgraded from 2.1.5 with squid3-dev proxy installed, to 2.2 with squid3.4
I'm not having trouble with https sites.
I use an intel PCI-express dual card.

em0: <intel(r) 1000="" pro="" network="" connection="" 7.4.2=""> port 0xd020-0xd03f mem 0xdf5a0000-0xdf5bffff,0xdf580000-0xdf59ffff irq 16 at device 0.0 on pci1
em0: Using an MSI interrupt
em1: <intel(r) 1000="" pro="" network="" connection="" 7.4.2=""> port 0xd000-0xd01f mem 0xdf540000-0xdf55ffff,0xdf520000-0xdf53ffff irq 17 at device 0.1 on pci1
em1: Using an MSI interrupt</intel(r)></intel(r)>

I also have all off-loading enabled, but I disabled the flow control.

Are you using the DNS forwarder (dnsmasq) or DNS resolver (Unbound)?
I use unbound, also as a package under 2.1.5

You mentioned the top part of the site loads in Firefox, then stops?
Have you cleared the Firefox cache?

Heper's link mentioned a reply asking for info using pciconf.
Here is my pci-express "pciconf -lv"

$ pciconf -lv
hostb0@pci0:0:0:0:	class=0x060000 card=0x00000000 chip=0x1f018086 rev=0x02 hdr=0x00
    class      = bridge
    subclass   = HOST-PCI
pcib1@pci0:0:1:0:	class=0x060400 card=0x1f101849 chip=0x1f108086 rev=0x02 hdr=0x01
    class      = bridge
    subclass   = PCI-PCI
pcib2@pci0:0:3:0:	class=0x060400 card=0x1f121849 chip=0x1f128086 rev=0x02 hdr=0x01
    class      = bridge
    subclass   = PCI-PCI
hostb1@pci0:0:14:0:	class=0x060000 card=0x1f141849 chip=0x1f148086 rev=0x02 hdr=0x00
    class      = bridge
    subclass   = HOST-PCI
none0@pci0:0:15:0:	class=0x080600 card=0x1f161849 chip=0x1f168086 rev=0x02 hdr=0x00
    class      = base peripheral
    subclass   = IOMMU
none1@pci0:0:19:0:	class=0x088000 card=0x1f151849 chip=0x1f158086 rev=0x02 hdr=0x00
    class      = base peripheral
ehci0@pci0:0:22:0:	class=0x0c0320 card=0x1f2c1849 chip=0x1f2c8086 rev=0x02 hdr=0x00
    class      = serial bus
    subclass   = USB
ahci0@pci0:0:23:0:	class=0x010601 card=0x1f221849 chip=0x1f228086 rev=0x02 hdr=0x00
    class      = mass storage
    subclass   = SATA
ahci1@pci0:0:24:0:	class=0x010601 card=0x1f321849 chip=0x1f328086 rev=0x02 hdr=0x00
    class      = mass storage
    subclass   = SATA
isab0@pci0:0:31:0:	class=0x060100 card=0x1f381849 chip=0x1f388086 rev=0x02 hdr=0x00
    class      = bridge
    subclass   = PCI-ISA
none2@pci0:0:31:3:	class=0x0c0500 card=0x1f3c1849 chip=0x1f3c8086 rev=0x02 hdr=0x00
    class      = serial bus
    subclass   = SMBus
em0@pci0:1:0:0:	class=0x020000 card=0x115e8086 chip=0x105e8086 rev=0x06 hdr=0x00
    class      = network
    subclass   = ethernet
em1@pci0:1:0:1:	class=0x020000 card=0x115e8086 chip=0x105e8086 rev=0x06 hdr=0x00
    class      = network
    subclass   = ethernet
pcib3@pci0:2:0:0:	class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01
    class      = bridge
    subclass   = PCI-PCI
pcib4@pci0:3:1:0:	class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01
    class      = bridge
    subclass   = PCI-PCI
pcib5@pci0:3:5:0:	class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01
    class      = bridge
    subclass   = PCI-PCI
pcib7@pci0:3:7:0:	class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01
    class      = bridge
    subclass   = PCI-PCI
pcib8@pci0:3:9:0:	class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01
    class      = bridge
    subclass   = PCI-PCI
pcib6@pci0:5:0:0:	class=0x060400 card=0x11501a03 chip=0x11501a03 rev=0x02 hdr=0x01
    class      = bridge
    subclass   = PCI-PCI
vgapci0@pci0:6:0:0:	class=0x030000 card=0x20001849 chip=0x20001a03 rev=0x21 hdr=0x00
    class      = display
    subclass   = VGA
igb0@pci0:7:0:0:	class=0x020000 card=0x15331849 chip=0x15338086 rev=0x03 hdr=0x00
    class      = network
    subclass   = ethernet
igb1@pci0:8:0:0:	class=0x020000 card=0x15331849 chip=0x15338086 rev=0x03 hdr=0x00
    class      = network
    subclass   = ethernet

note*) I do not use my on-board igb0 and igb1 devices (I210, they did not work properly on v2.1.5, have not tried on v2.2)