For the archives...
I upgraded the backup firewall to 3.9-stable but it still appeared to have
the MASTER-MASTER issue (with primary at 3.8). Based on some other posts in
misc I tried using aliases on a single carp interface instead of multiple
carp interfaces on the same physical interface. I upgraded the primary to
3.9-stable and things seem to be operating as expected. I have not had any
MASTER<-->MASTER issues that weren't self inflicted. I guess I'm not 100%
sure if the cure was upgrading or migrating to aliases, but it's working.
The self inflicted issue came when I added an alias IP to FW1:carp0 but not
yet to FW2:carp0. Both FW1 and FW2 became master for the interface, until I
added the alias to FW2.
Thanks again for the pointers and the great OS!
-Steve S.
that can lead to master-master situations unfortunately. not too much
we can do about it :(
--
BS Web Services, http://www.bsws.de/
OpenBSD-based Webhosting, Mail Services, Managed Servers, ...
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)