PfSense unable to resolve *.pfsense.org
-
-
OK, that rules out DNS definitively. I'd start by looking at the certificate error you're getting with HTTPS sites and see if the cert matches the site. Your datacentre may be transparently proxying your SSL traffic.
-
@KOM:
OK, that rules out DNS definitively. I'd start by looking at the certificate error you're getting with HTTPS sites and see if the cert matches the site. Your datacentre may be transparently proxying your SSL traffic.
In firefox it give me the message
"Secure Connection Failed"
An error occurred during a connection to www.pfsense.org. The server rejected the handshake because the client downgraded to a lower TLS version then the server supports. (Error code: ssl_error_inappropiate_fallback_alert)
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.Chrome just give an error about took too long to respond.
-
You'd better have a long angry talk to your ISP.
-
A quick Google shows that lots of people are having this same type of problem specifically with Firefox, but you mentioned Chrome times out. It shouldn't time out. What happens if you use IE <shiver>? Are you running any local antivirus solution that has URL-scanning or SSL-filtering options?</shiver>
-
@KOM:
A quick Google shows that lots of people are having this same type of problem specifically with Firefox, but you mentioned Chrome times out. It shouldn't time out. What happens if you use IE <shiver>? Are you running any local antivirus solution that has URL-scanning or SSL-filtering options?</shiver>
IE took a very long time to give a time out error. No antiviruses, just another VM running windows 7 plugged into the same vlan as the pfsense box LAN.
-
Hmm, I don't know what else to check. Perhaps ask your colo support about the symptoms and see if they are doing anything.
-
OK, the ISP say they are don't do any type of filtering, and they don't know why I would be having this problem.
The guys at the co-location are saying they don't support having a firewall on my side of the metro E link. They want me to setup a a firewall at the co-location and then connect my management network over the metro E link. That seems link a security risk to me, but they assure me all there other clients do it, and it perfectly safe. I have never used a metro E link before, so should I be worried?
I going to setup a test and see if it will even work they are suggestion either today or tomorrow.
[edit]
OK I did the test of putting the firewall on the other side of the metro E link. And connecting the windows 7 test machine on the other side of the metro E link. Same problem, no change other then I can now get up dates from pfsense.org, for the firewall.[edit]
OK the guy at the co-location put a sonic wall inplace of the pfsense, same problem. -
I didn't think it was a pfSense problem. Now yo know for sure.
-
@KOM:
I didn't think it was a pfSense problem. Now yo know for sure.
It was a issues with the switch at the co-location. My tests now show it working so going to go live with the changes this weekend. Thanks to everyone. :)
