From owner-freebsd-stable@FreeBSD.ORG Wed Mar 5 17:04:23 2008 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id EB44A1065674 for ; Wed, 5 Mar 2008 17:04:23 +0000 (UTC) (envelope-from mike@sentex.net) Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [64.7.153.18]) by mx1.freebsd.org (Postfix) with ESMTP id A58F28FC2E for ; Wed, 5 Mar 2008 17:04:23 +0000 (UTC) (envelope-from mike@sentex.net) Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by smarthost1.sentex.ca (8.14.2/8.14.2) with ESMTP id m25GVCqH057148; Wed, 5 Mar 2008 11:31:12 -0500 (EST) (envelope-from mike@sentex.net) Received: from mdt-xp.sentex.net (simeon.sentex.ca [192.168.43.27]) by lava.sentex.ca (8.13.8/8.13.3) with ESMTP id m25GVBIU002198 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 5 Mar 2008 11:31:11 -0500 (EST) (envelope-from mike@sentex.net) Message-Id: <200803051631.m25GVBIU002198@lava.sentex.ca> X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Wed, 05 Mar 2008 11:33:14 -0500 To: , stable@freebsd.org From: Mike Tancsa In-Reply-To: References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Cc: Subject: Re: Could Not open some sites from Windows Vista and Server 2008 when using FreeBSD as gw X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Mar 2008 17:04:24 -0000 At 03:49 AM 3/5/2008, =?KOI8-R?B?98zBxMnTzMHXIO7FxM/TxcvJzg==?= wrote: >We are using FreeBSD as GateWay with PF. >And the problem is that some web-sites as Gmail.com or Msn.com are >unavailable from machines with Vista or Server 2008 installed. >If use external or internal proxy (Kerio WinRoute, wich also goes through >the same FreeBSD gw) they are opening correctly. >Also in 6.1 version were problems with skype from such machines. Its hard to say without seeing your pf rules. But I seem to recall issues with Vista where pf rules did not have keep state enabled. ---Mike