Netgate SG-1000 microFirewall

Author Topic: Gateway group failing to pass http/https traffic  (Read 1006 times)

0 Members and 1 Guest are viewing this topic.

Offline john-dub

  • Newbie
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Gateway group failing to pass http/https traffic
« on: January 29, 2013, 03:57:58 am »
Hi All,

I am currently running 2.0.2-RELEASE (i386)/FreeBSD 8.1-RELEASE-p13 and am having an issue at the moment using multiple wan connections in a gateway group. We have three ADSL connections running on the site connect to WAN, OPT1 and OPT2 addressed as follows

WAN    -> Gateway (WANGW)
OPT1   -> Gateway (OPT1GW)
OPT2   -> Gateway (OPT2GW)

LAN Subnet
LAN interface

Our gateway group is called mulitwan and has all three WAN connections in it as tier1 connections (round robin).

Currently if we configure the LAN firewall rule to use the mulitwan gateway group as its gateway none of the machines on the LAN can browse websites (Secure and Nonsecure). However if I set the gateway to be our WANGW then there is no issue.

If I revert the gateway back to our gateway group and use something like bitorrent then I can see traffic going out all interfaces. I can also see SIP and DNS traffic successfully going out using the gateway group. However as soon as we revert to the gateway group then we will lose the ability to browse the internet on machines behind the firewall.

I have tried adding floating rules, ameding DHCP to pass google DNS servers to clients just in case it was a DNS thing all to no avail. All gateways are showing as up as per status > gateways and I can ping a host on the internet from each wan interface using diagnostics > ping

We had been following as our initial guide on configuration. I was hoping someone might have a pointer as to where I could go next


Offline john-dub

  • Newbie
  • *
  • Posts: 12
  • Karma: +0/-0
    • View Profile
Re: Gateway group failing to pass http/https traffic
« Reply #1 on: January 29, 2013, 08:25:52 am »
Just looking at this and it seems that despite having a Gateway group netstat -r is showing me that my default gateway is still the wan connection

Routing tables

Destination        Gateway            Flags    Refs      Use  Netif Expire
default         UGS         0   374223    re0
a.resolvers.level3       UGHS        0    64291    re2
google-public-dns-       UGHS        0    69587    re0
google-public-dns-       UGHS        0    69611    re1
localhost          link#11            UH          0      102    lo0       UGS         0   293674 ovpns1       link#12            UHS         0        0    lo0       link#12            UH          0        0 ovpns1       link#3             U           0     1980    re2     link#3             UHS         0        0    lo0       link#2             U           0      267    re1     link#2             UHS         0        0    lo0       link#1             U           0     1185    re0     link#1             UHS         0        0    lo0       link#5             U           0  2617792    xl0
server1            link#5             UHS         0        0    lo0
resolver2.opendns.       UGHS        0      290    re2       UGHS        0     4879    re0