Can't connect to subaru.com on port 80

BSD Wiz | 2 Oct 2008 01:02

Re: Can't connect to subaru.com on port 80

sure, but i'm not filtering traffic on port 80 by IP and all www traffic seems to work fine. please let me know if you prefer this an another format.

this has me stumped...

thanks!

-phil

here's the WAN Rules;

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

</destination>

<descr>NAT Allow inbound traffic from Lingo</descr>

</rule>

<rule>

<any/>

</source>

</destination>

<descr>NAT Allow Backups from PPGNetServ using SSH</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

</destination>

<descr>Allow iperf connections from GoDaddy Server</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

<any/>

</source>

</destination>

<descr>WAN -> Allow Remote Admin of FW</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

<any/>

</source>

<any/>

</destination>

<log/>

<descr>Allow Incoming Remote VPN Road Warriors</descr>

</rule>

<rule>

And here's the LAN rules

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> Allow FTP Out</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

</source>

<any/>

</destination>

<descr>LAN -> Allow Phill's mac ANY to ANY</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> Nagios</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> NTOP/NetFlow</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> Yahoo IM</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> Allow All</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> 26(ssh godaddy/PPGNetServ)</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> Allow 1194 for OpenVPN</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> Webmin</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> 9999 GoDaddy CP</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> whois query</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> Yahoo SMTP</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

<any/>

</destination>

<descr>LAN -> Remote Desktop</descr>

</rule>

<rule>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

</source>

</destination>

<descr>LAN -> 5001(iperf)</descr>

</rule>

<rule>

<type>block</type>

<max-src-nodes/>

<max-src-states/>

<statetype>keep state</statetype>

<os/>

<any/>

</source>

<any/>

</destination>

<log/>

<descr>Drop All Outbound Packets</descr>

</rule>

On Oct 1, 2008, at 5:46 PM, Tim Nelson wrote:

It may be helpful to see your rulesets on your LAN and WAN interfaces... or paste the pertinent XML from your config file..

Tim Nelson

Systems/Network Engineer

Rockbochs Inc.

(218)727-4332 x105

----- "BSD Wiz" <bsdwiz-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:

i'm connected via cable modem, mtu is set to 1500.

thanks

-phil

On Oct 1, 2008, at 5:23 PM, Chris Buechler wrote:

On Wed, Oct 1, 2008 at 6:18 PM, BSD Wiz <bsdwiz-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:

pfSense 1.2.1 RC1

only add-on package installed is iperf.

I have rules to allow allow traffic out on port 80 and 443. I have

also(just

to be sure) allowed *ALL* traffic out from my static ip on my

macbook.

Problem is I can't get to the site subaru.com.

I don't see anything in the logs and I've never had a problem

getting to any

other site. If I telnet from the pfsense firewall to subaru.com

on port 80

it get's connected. If i try that from my machine(laptop macbook)

it times

out.

am i missing something or what?

We don't like Subaru. ;) kidding

sounds like a MTU issue, try lowering your MTU on WAN if you have

PPPoE.

---------------------------------------------------------------------

To unsubscribe, e-mail: support-unsubscribe <at> pfsense.com

For additional commands, e-mail: support-help-zsHM3v2T5LBBDgjK7y7TUQ@public.gmane.org

---------------------------------------------------------------------

To unsubscribe, e-mail: support-unsubscribe <at> pfsense.com

For additional commands, e-mail: support-help-zsHM3v2T5LBBDgjK7y7TUQ@public.gmane.org

---------------------------------------------------------------------

To unsubscribe, e-mail: support-unsubscribe <at> pfsense.com

For additional commands, e-mail: support-help-zsHM3v2T5LBBDgjK7y7TUQ@public.gmane.org