Problems with some HTTPS Websites / Intel® PRO/1000 PT Dual Port Server Adapter



  • Hi,

    I have remarked problems after upgrading pfsense from 2.1.3 to 2.2. I couldn’t open correctly some websites on some interfaces for example:
    https://www.mozilla.org/
    https://de.yahoo.com/
    …………..
    On Firefox, only the top of the website was showing. The rest was white. Iexplorer didn’t show anything.

    Other sites where working:
    https://www.google.de

    I have pfsense running on a DELL Power EDGE T20 (Pentium G3220, 4GB RAM ECC) with additional two RJ45 Ports on an Intel® PRO/1000 PT Dual Port Server Adapter.

    WAN and LAN are on VLAN on different ports of the Dual Port Server Adapter. I have an additional OPT1 on the internal mainboard RJ45.

    I had only problems to open the websites on the LAN. To open the same websites on the OPT1 worked well. I have resolved this problem for the moment by switching the LAN network from the Dual Port Server Adapter to a VLAN on the internal mainboard RJ45. WAN is still on the Dual Port Server Adapter.

    So logically the problems is related to the Intel® PRO/1000 PT Dual Port Server Adapter.

    I have already checked a troubleshooting the the pfsense website without change: https://doc.pfsense.org/index.php/Unable_to_Access_Some_Websites

    Has anyone an advice what I can do or check or something?



  • I can not imagine your problem being related to the dual intel adapter itself.
    Are your running a proxy? Any customization in the loader.conf at all?

    Maybe it is a upgrade issue when upgrading from a lower version of pfsense to the current 2.2 release.



  • There is no proxy on the system and I haven't customized the loader.conf.

    When I switch back LAN to the Dual Port Server Adapter, the problem returns.





  • I've upgraded from 2.1.5 with squid3-dev proxy installed, to 2.2 with squid3.4 
    I'm not having trouble with https sites.
    I use an intel PCI-express dual card.

    em0: <intel(r) 1000="" pro="" network="" connection="" 7.4.2=""> port 0xd020-0xd03f mem 0xdf5a0000-0xdf5bffff,0xdf580000-0xdf59ffff irq 16 at device 0.0 on pci1
    em0: Using an MSI interrupt
    em1: <intel(r) 1000="" pro="" network="" connection="" 7.4.2=""> port 0xd000-0xd01f mem 0xdf540000-0xdf55ffff,0xdf520000-0xdf53ffff irq 17 at device 0.1 on pci1
    em1: Using an MSI interrupt</intel(r)></intel(r)>
    

    I also have all off-loading enabled, but I disabled the flow control.

    Are you using the DNS forwarder (dnsmasq) or DNS resolver (Unbound)?
    I use unbound, also as a package under 2.1.5

    You mentioned the top part of the site loads in Firefox, then stops?
    Have you cleared the Firefox cache?

    Heper's link mentioned a reply asking for info using pciconf.
    Here is my pci-express "pciconf -lv"

    $ pciconf -lv
    hostb0@pci0:0:0:0:	class=0x060000 card=0x00000000 chip=0x1f018086 rev=0x02 hdr=0x00
        class      = bridge
        subclass   = HOST-PCI
    pcib1@pci0:0:1:0:	class=0x060400 card=0x1f101849 chip=0x1f108086 rev=0x02 hdr=0x01
        class      = bridge
        subclass   = PCI-PCI
    pcib2@pci0:0:3:0:	class=0x060400 card=0x1f121849 chip=0x1f128086 rev=0x02 hdr=0x01
        class      = bridge
        subclass   = PCI-PCI
    hostb1@pci0:0:14:0:	class=0x060000 card=0x1f141849 chip=0x1f148086 rev=0x02 hdr=0x00
        class      = bridge
        subclass   = HOST-PCI
    none0@pci0:0:15:0:	class=0x080600 card=0x1f161849 chip=0x1f168086 rev=0x02 hdr=0x00
        class      = base peripheral
        subclass   = IOMMU
    none1@pci0:0:19:0:	class=0x088000 card=0x1f151849 chip=0x1f158086 rev=0x02 hdr=0x00
        class      = base peripheral
    ehci0@pci0:0:22:0:	class=0x0c0320 card=0x1f2c1849 chip=0x1f2c8086 rev=0x02 hdr=0x00
        class      = serial bus
        subclass   = USB
    ahci0@pci0:0:23:0:	class=0x010601 card=0x1f221849 chip=0x1f228086 rev=0x02 hdr=0x00
        class      = mass storage
        subclass   = SATA
    ahci1@pci0:0:24:0:	class=0x010601 card=0x1f321849 chip=0x1f328086 rev=0x02 hdr=0x00
        class      = mass storage
        subclass   = SATA
    isab0@pci0:0:31:0:	class=0x060100 card=0x1f381849 chip=0x1f388086 rev=0x02 hdr=0x00
        class      = bridge
        subclass   = PCI-ISA
    none2@pci0:0:31:3:	class=0x0c0500 card=0x1f3c1849 chip=0x1f3c8086 rev=0x02 hdr=0x00
        class      = serial bus
        subclass   = SMBus
    em0@pci0:1:0:0:	class=0x020000 card=0x115e8086 chip=0x105e8086 rev=0x06 hdr=0x00
        class      = network
        subclass   = ethernet
    em1@pci0:1:0:1:	class=0x020000 card=0x115e8086 chip=0x105e8086 rev=0x06 hdr=0x00
        class      = network
        subclass   = ethernet
    pcib3@pci0:2:0:0:	class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01
        class      = bridge
        subclass   = PCI-PCI
    pcib4@pci0:3:1:0:	class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01
        class      = bridge
        subclass   = PCI-PCI
    pcib5@pci0:3:5:0:	class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01
        class      = bridge
        subclass   = PCI-PCI
    pcib7@pci0:3:7:0:	class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01
        class      = bridge
        subclass   = PCI-PCI
    pcib8@pci0:3:9:0:	class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01
        class      = bridge
        subclass   = PCI-PCI
    pcib6@pci0:5:0:0:	class=0x060400 card=0x11501a03 chip=0x11501a03 rev=0x02 hdr=0x01
        class      = bridge
        subclass   = PCI-PCI
    vgapci0@pci0:6:0:0:	class=0x030000 card=0x20001849 chip=0x20001a03 rev=0x21 hdr=0x00
        class      = display
        subclass   = VGA
    igb0@pci0:7:0:0:	class=0x020000 card=0x15331849 chip=0x15338086 rev=0x03 hdr=0x00
        class      = network
        subclass   = ethernet
    igb1@pci0:8:0:0:	class=0x020000 card=0x15331849 chip=0x15338086 rev=0x03 hdr=0x00
        class      = network
        subclass   = ethernet
    
    

    note*) I do not use my on-board igb0 and igb1 devices (I210, they did not work properly on v2.1.5, have not tried on v2.2)