I have the following config:
LAN 01: 192.168.16.0/24 (LAN for internal servers) LAN 02: 192.168.67.0/24 (LAN for workstations) WAN: X.X.X.X
PFSENSE LAN IP: 192.168.16.1 PFSENSE LAN IP: 192.168.67.1 (it's a virtual IP)
LAN 01 and LAN 02 are physically connected (i.e. in the same switch. I know I should use separate LANs or at least VLANs on them, but I can not easily change this configuration for now).
I have a PFSENSE installation (2.2) working where computers in LAN 02 get their IP addresses from a DHCP SERVER and use PFSENSE as default gateway.
Here's my problem:
If I sit on a computer residing on LAN 02 and I ssh (or any other persistent protocol for that matter) onto a server residing on LAN 01 like this:
$ ssh -l myself 192.168.16.25
I connect without issues. The connection lasts for something in between 20 and 30 seconds, and then it consistently gets dropped.
So my question is: What can I do to avoid getting the connection dropped?
I did a tcpdump from both sides and, at some point, packets start to get duplicated. It looks like this:
I have this option enabled which I thought it would help, but it didn't.
I should mention that this exact same configuration, using a LINUX FIREWALL (iptables) works perfectly.