Discussion:
[pfSense] ICMP Rate Limit
Daniel
2017-10-17 12:22:08 UTC
Permalink
Hi there again,



just wanted to know if pfSense has per default any ICMP rate Limitations installed?

Problem is I see some small loss in WAN/LAN interface but actually I have a any/any rules.

I see this on both firewalls I have installed.



Cheers



Daniel
ibrahim uçar
2017-10-17 12:25:56 UTC
Permalink
Hi Daniel,

I hope that I did understand you :). You should go to System > Advanced >
Firewall & NAT > at the bottom of this tab, you will see state timeouts.
There is ICMP timeout. If it's not that you're talking about, let me know.




--

*İbrahim UÇAR*

Blogger | https://lifeoverlinux.com <http://lifeoverlinux.com>
Post by Daniel
Hi there again,
just wanted to know if pfSense has per default any ICMP rate Limitations installed?
Problem is I see some small loss in WAN/LAN interface but actually I have a any/any rules.
I see this on both firewalls I have installed.
Cheers
Daniel
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
Daniel
2017-10-17 12:35:11 UTC
Permalink
Hi,

not sure. Problem is - I have in my network packetloss and we started to change everything.
Cabling, Switches and so on. On the thing what we didn’t changed was the firewalls.

So I installed Smokeping on a Server which is behind the firewall. I configured to monitor WAN und LAN interface with ICMP and here I see some loss.
All other internal Hosts has no loss just both Firewalls. Traffic which is routed thought the Firewall is just few Mbits – So not overloaded or so.

I thing, or my opinion is that pfSense has some ICMP limitations which shows me loss but this is just a case of some limitations.
But more funny is – I see the same loss on both Firewalls.


Am 17.10.17, 14:25 schrieb "List im Auftrag von ibrahim uçar" <list-***@lists.pfsense.org im Auftrag von ***@gmail.com>:

Hi Daniel,

I hope that I did understand you :). You should go to System > Advanced >
Firewall & NAT > at the bottom of this tab, you will see state timeouts.
There is ICMP timeout. If it's not that you're talking about, let me know.




--

*İbrahim UÇAR*

Blogger | https://lifeoverlinux.com <http://lifeoverlinux.com>
Post by Daniel
Hi there again,
just wanted to know if pfSense has per default any ICMP rate Limitations installed?
Problem is I see some small loss in WAN/LAN interface but actually I have a any/any rules.
I see this on both firewalls I have installed.
Cheers
Daniel
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
ibrahim uçar
2017-10-17 13:16:00 UTC
Permalink
Well, If I were you, I would draw my network schema and then I try to think
why there are some packet loss on my network, maybe because of long cables,
internet speed, packet jumps ( router devices ), big network traffic,
firewall state tables, other things you know.

Also it effects how many devices do you use in your network. For example
when a package try to goes to internet, how many routers is this packet
going through? For example 2 devices, 4 or 10? :)

Well my friend many things can effects for packet loss.


Your questions which is about pfSense ICMP limitations. I think, the
problem is not about pfSense or ICMP limitations.

I will make a check list that you can might be solved the problem after you
looked this things.

- State tables => Diagnostics > States ( Is it full? )
- RAM usage (dashboard)
- CPU usage (dashboard)
- TOP command for processes of services. => Diagnostics > System Activity
- Traffic usage => Diagnostics > Traffic Graph

Send here a picture of your gateways status please. Status > Gateways

I hope, you can solve the problem. Well, These are my thoughts, I wish I
could help you.





--

*İbrahim UÇAR*

Blogger | https://lifeoverlinux.com <http://lifeoverlinux.com>
Post by Daniel
Hi,
not sure. Problem is - I have in my network packetloss and we started to change everything.
Cabling, Switches and so on. On the thing what we didn’t changed was the firewalls.
So I installed Smokeping on a Server which is behind the firewall. I
configured to monitor WAN und LAN interface with ICMP and here I see some
loss.
All other internal Hosts has no loss just both Firewalls. Traffic which is
routed thought the Firewall is just few Mbits – So not overloaded or so.
I thing, or my opinion is that pfSense has some ICMP limitations which
shows me loss but this is just a case of some limitations.
But more funny is – I see the same loss on both Firewalls.
Am 17.10.17, 14:25 schrieb "List im Auftrag von ibrahim uçar" <
Hi Daniel,
I hope that I did understand you :). You should go to System > Advanced >
Firewall & NAT > at the bottom of this tab, you will see state timeouts.
There is ICMP timeout. If it's not that you're talking about, let me know.
--
*İbrahim UÇAR*
Blogger | https://lifeoverlinux.com <http://lifeoverlinux.com>
Post by Daniel
Hi there again,
just wanted to know if pfSense has per default any ICMP rate
Limitations
Post by Daniel
installed?
Problem is I see some small loss in WAN/LAN interface but actually I
have
Post by Daniel
a any/any rules.
I see this on both firewalls I have installed.
Cheers
Daniel
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
Continue reading on narkive:
Loading...