Suck Day

So reconfigured nlb on the production servers yesterday. Things were mostly ok, but a bit odd, but nothing that appeared to be a deal-breaker. So then today enabled the firewall. And all the wheels fell off. But turning the firewall off didn't help - nlb was properly broken. grrr. And the test servers, which were working perfectly last week were also broked. Same sort of problem. So had to remove nlb from production until we could schedule more time to fix them. And then the dude from Microsoft called back to say that actually firewalls on nlb servers is not a supported configuration. Good to see that Microsoft don't support securing their servers in a variety of configurations (including on domain controllers).

*sigh*