Problems with some HTTPS Websites / Intel® PRO/1000 PT Dual Port Server Adapter
-
Hi,
I have remarked problems after upgrading pfsense from 2.1.3 to 2.2. I couldn’t open correctly some websites on some interfaces for example:
https://www.mozilla.org/
https://de.yahoo.com/
…………..
On Firefox, only the top of the website was showing. The rest was white. Iexplorer didn’t show anything.Other sites where working:
https://www.google.deI have pfsense running on a DELL Power EDGE T20 (Pentium G3220, 4GB RAM ECC) with additional two RJ45 Ports on an Intel PRO/1000 PT Dual Port Server Adapter.
WAN and LAN are on VLAN on different ports of the Dual Port Server Adapter. I have an additional OPT1 on the internal mainboard RJ45.
I had only problems to open the websites on the LAN. To open the same websites on the OPT1 worked well. I have resolved this problem for the moment by switching the LAN network from the Dual Port Server Adapter to a VLAN on the internal mainboard RJ45. WAN is still on the Dual Port Server Adapter.
So logically the problems is related to the Intel PRO/1000 PT Dual Port Server Adapter.
I have already checked a troubleshooting the the pfsense website without change: https://doc.pfsense.org/index.php/Unable_to_Access_Some_Websites
Has anyone an advice what I can do or check or something?
-
I can not imagine your problem being related to the dual intel adapter itself.
Are your running a proxy? Any customization in the loader.conf at all?Maybe it is a upgrade issue when upgrading from a lower version of pfsense to the current 2.2 release.
-
There is no proxy on the system and I haven't customized the loader.conf.
When I switch back LAN to the Dual Port Server Adapter, the problem returns.
-
-
I've upgraded from 2.1.5 with squid3-dev proxy installed, to 2.2 with squid3.4
I'm not having trouble with https sites.
I use an intel PCI-express dual card.em0: <intel(r) 1000="" pro="" network="" connection="" 7.4.2=""> port 0xd020-0xd03f mem 0xdf5a0000-0xdf5bffff,0xdf580000-0xdf59ffff irq 16 at device 0.0 on pci1 em0: Using an MSI interrupt em1: <intel(r) 1000="" pro="" network="" connection="" 7.4.2=""> port 0xd000-0xd01f mem 0xdf540000-0xdf55ffff,0xdf520000-0xdf53ffff irq 17 at device 0.1 on pci1 em1: Using an MSI interrupt</intel(r)></intel(r)>
I also have all off-loading enabled, but I disabled the flow control.
Are you using the DNS forwarder (dnsmasq) or DNS resolver (Unbound)?
I use unbound, also as a package under 2.1.5You mentioned the top part of the site loads in Firefox, then stops?
Have you cleared the Firefox cache?Heper's link mentioned a reply asking for info using pciconf.
Here is my pci-express "pciconf -lv"$ pciconf -lv hostb0@pci0:0:0:0: class=0x060000 card=0x00000000 chip=0x1f018086 rev=0x02 hdr=0x00 class = bridge subclass = HOST-PCI pcib1@pci0:0:1:0: class=0x060400 card=0x1f101849 chip=0x1f108086 rev=0x02 hdr=0x01 class = bridge subclass = PCI-PCI pcib2@pci0:0:3:0: class=0x060400 card=0x1f121849 chip=0x1f128086 rev=0x02 hdr=0x01 class = bridge subclass = PCI-PCI hostb1@pci0:0:14:0: class=0x060000 card=0x1f141849 chip=0x1f148086 rev=0x02 hdr=0x00 class = bridge subclass = HOST-PCI none0@pci0:0:15:0: class=0x080600 card=0x1f161849 chip=0x1f168086 rev=0x02 hdr=0x00 class = base peripheral subclass = IOMMU none1@pci0:0:19:0: class=0x088000 card=0x1f151849 chip=0x1f158086 rev=0x02 hdr=0x00 class = base peripheral ehci0@pci0:0:22:0: class=0x0c0320 card=0x1f2c1849 chip=0x1f2c8086 rev=0x02 hdr=0x00 class = serial bus subclass = USB ahci0@pci0:0:23:0: class=0x010601 card=0x1f221849 chip=0x1f228086 rev=0x02 hdr=0x00 class = mass storage subclass = SATA ahci1@pci0:0:24:0: class=0x010601 card=0x1f321849 chip=0x1f328086 rev=0x02 hdr=0x00 class = mass storage subclass = SATA isab0@pci0:0:31:0: class=0x060100 card=0x1f381849 chip=0x1f388086 rev=0x02 hdr=0x00 class = bridge subclass = PCI-ISA none2@pci0:0:31:3: class=0x0c0500 card=0x1f3c1849 chip=0x1f3c8086 rev=0x02 hdr=0x00 class = serial bus subclass = SMBus em0@pci0:1:0:0: class=0x020000 card=0x115e8086 chip=0x105e8086 rev=0x06 hdr=0x00 class = network subclass = ethernet em1@pci0:1:0:1: class=0x020000 card=0x115e8086 chip=0x105e8086 rev=0x06 hdr=0x00 class = network subclass = ethernet pcib3@pci0:2:0:0: class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01 class = bridge subclass = PCI-PCI pcib4@pci0:3:1:0: class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01 class = bridge subclass = PCI-PCI pcib5@pci0:3:5:0: class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01 class = bridge subclass = PCI-PCI pcib7@pci0:3:7:0: class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01 class = bridge subclass = PCI-PCI pcib8@pci0:3:9:0: class=0x060400 card=0x860810b5 chip=0x860810b5 rev=0xba hdr=0x01 class = bridge subclass = PCI-PCI pcib6@pci0:5:0:0: class=0x060400 card=0x11501a03 chip=0x11501a03 rev=0x02 hdr=0x01 class = bridge subclass = PCI-PCI vgapci0@pci0:6:0:0: class=0x030000 card=0x20001849 chip=0x20001a03 rev=0x21 hdr=0x00 class = display subclass = VGA igb0@pci0:7:0:0: class=0x020000 card=0x15331849 chip=0x15338086 rev=0x03 hdr=0x00 class = network subclass = ethernet igb1@pci0:8:0:0: class=0x020000 card=0x15331849 chip=0x15338086 rev=0x03 hdr=0x00 class = network subclass = ethernet
note*) I do not use my on-board igb0 and igb1 devices (I210, they did not work properly on v2.1.5, have not tried on v2.2)