Re: [pfSense Support] pfSense 1.2.1 RC1 Time Zone

2008-10-16 Thread Vick Khera
On Thu, Oct 16, 2008 at 8:54 AM, Atkins, Dwane P [EMAIL PROTECTED] wrote: However, when I went back at looked at users who had logged on to the Captive Portal, the times were still set at a +5. Programs read the timezone database when they first need it. They never re-read it. So whatever

Re: [pfSense Support] pfsense 1.2.1 dude

2008-10-20 Thread Vick Khera
On Mon, Oct 20, 2008 at 6:08 AM, Mikel Jimenez [EMAIL PROTECTED] wrote: Hello Is secure to put pfsense 1.2.1 in production enviroment? If you're asking random people you don't know if it is secure enough, then yes, it is secure enough for you. If you really want to know if it is secure, you

Re: [pfSense Support] Question on Broadcom Crypto card

2008-10-22 Thread Vick Khera
On Tue, Oct 21, 2008 at 6:11 PM, Wade Blackwell [EMAIL PROTECTED]wrote: Good afternoon all, I have 1.2 stable installed on an ancient PII-450 (old Netserver). The redeeming factor is a Broadcom crypto card. I looked through dmesg and the logs and I can't figure out of the systems sees the

Re: [pfSense Support] Great work releasing 1.2.1 RC1

2008-10-28 Thread Vick Khera
On Tue, Oct 28, 2008 at 3:59 PM, [EMAIL PROTECTED] wrote: What will the migration path look like from 1.2 to 1.2.1? First Question: On an embedded system (Soekris Net5501), will I need to flash the CF card from scratch or will I be able to use the firmware 'feature' on the GUI? If the

Re: [pfSense Support] Full install for 1.2.1-RC1 embedded?

2008-10-28 Thread Vick Khera
On Tue, Oct 28, 2008 at 11:25 PM, Craig Silva [EMAIL PROTECTED] wrote: To answer my own question - yes there are docs on this - http://devwiki.pfsense.org/FullInstallOnWRAP What I really wanted to ask was - how can I create an embedded image to put onto a flash card (as opposed to a micro

Re: [pfSense Support] Multipe WAN ip's, one not working with 1.2.1

2008-10-30 Thread Vick Khera
thanks a lot, this is the first time in between changing firewall appliance or version, I had to reset the ADSL modem itself... didn't realize that that a modem would be responsible for ARP entries as well... *All* devices keep an ARP cache, else they'd spend all their time sending ARP packets

Re: [pfSense Support] lighttpd bug in 1.2

2008-11-11 Thread Vick Khera
Upgrade to 1.2.1-RC2. It will be released in the next day or so. Scott Exactly where should I check for the release? I looked in http://snapshots.pfsense.org/FreeBSD7/RELENG_1_2/, and there is one version being released every couple of hours, it seems/ You use your time machine to move

Re: [pfSense Support] import DHCP static IP mappings

2008-12-05 Thread Vick Khera
On Fri, Dec 5, 2008 at 9:58 AM, Kirk Wight [EMAIL PROTECTED] wrote: Hello, Is there any way to import or drop in an existing dhcpd.conf to pfSense, to avoid having to enter dozens of static IP mappings in the GUI? I've tried simply adding my existing mappings to the pfSense

[pfSense Support] IPsec connection problems

2009-01-16 Thread Vick Khera
I'm running 1.2.1 on both ends of this particular IPsec connection. One location is my main office and is running the full version, the other is my home office running embedded on a WRAP based system. The office is connected via a local wireless ISP, and the home is on Comcast. For the longest

Re: [pfSense Support] problems trying to sftp/scp pfSense router

2009-01-30 Thread Vick Khera
On Fri, Jan 30, 2009 at 8:41 AM, Jorge Marques Pelizzoni jorge.pelizz...@gmail.com wrote: First of all, congratulations on the great work you've been doing on pfSense! Here is my problem: I've enabled ssh on my pfSense 1.2.2 router and am able to run ssh sessions on it normally. However, when

Re: [pfSense Support] 1.2.2 TCP Disconnects (sessions)

2009-01-30 Thread Vick Khera
On Fri, Jan 30, 2009 at 3:14 PM, Chris Bagnall li...@minotaur.cc wrote: According to the asterisk logs, the phones at the remote sites disconnect and reconnect on an annoyingly regular basis (approximately every 30 minutes). There is no other traffic on the WAN interface apart from the

Re: [pfSense Support] pfSense to use with production web server

2009-03-04 Thread Vick Khera
On Wed, Mar 4, 2009 at 11:22 AM, Raleigh Guevarra death...@yahoo.com wrote: With no disrespect to the community, I just need to know the facts after reading about firewalls esp packet filtering types of firewall. Is it safe and secured to use pfSense infront of a web server in production,

Re: [pfSense Support] Massive static route load

2009-03-16 Thread Vick Khera
add one or two static routes. then try exporting the config file but limit to the network configuration section (or try other sections if that isn't it) and look at its format. then reproduce that format using whatever tools you have, then re-upload that file with the added routes in it.

Re: [pfSense Support] Re: Can't get more than 15kpps.

2009-03-23 Thread Vick Khera
On Mon, Mar 23, 2009 at 8:30 AM, Lenny five2one.le...@gmail.com wrote: I got offered a Sun Fire X2200 with Opteron Dual Core 2210(that's 1.8GHz). Will that do it? (for ~150kpps) Double check the NICs in that box. I believe they're broadcom and nvidia (yes, Sun does a mix and match on the same

Re: [pfSense Support] Internet at the lake? Rogers Mobile Internet Stick (Rocket) with pfSense?

2009-03-26 Thread Vick Khera
On Wed, Mar 25, 2009 at 11:31 PM, Chuck Mariotti cmario...@xunity.com wrote: I have the option of staying/working from a home on a the Lake for a number of weeks this summer here in Ontario/Canada. Nice and relaxed. Unfortunately, the only internet access is dialup, which is not acceptable

Re: [pfSense Support] Dell PRO/1000VT Quad port NIC

2009-04-13 Thread Vick Khera
On Mon, Apr 13, 2009 at 2:04 PM, Chris Buechler c...@pfsense.org wrote: I don't have any of the cards myself, but the igb cards should perform considerably better than em cards. Whether the driver is unstable in combination with one specific piece of hardware (most likely), or one particular

Re: [pfSense Support] Attention Firebox X Series Users - Testing Needed

2009-04-24 Thread Vick Khera
On Fri, Apr 24, 2009 at 10:32 AM, Andrew Cotter andrew.cot...@somersetcapital.com wrote: Is there an update path from 1.2.2 to 1.2.3-RC1 embedded?  I only see Full images on the mirrors.  I can do a backup/swap CF/restore, but the box I was going to test on is 120 miles away. I have not had a

Re: [pfSense Support] Appliance support

2009-06-23 Thread Vick Khera
On Tue, Jun 23, 2009 at 9:14 AM, Gary Buckmasterg...@centipedenetworks.com wrote: Also, the embedded instances of pfSense don't come out-of-the-box ready either.  You still need to attach a serial cable and do the initial configuration.  This is as it should be. Last time I set up an embedded

Re: [pfSense Support] Patch and ISO: New Feature -- Auto Configuring Interfaces

2009-07-06 Thread Vick Khera
On Mon, Jul 6, 2009 at 11:27 AM, Tim A.pfse...@lists.goldenpath.org wrote: I missed that episode. POLA? Principle of Least Astonishment - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail:

Re: [pfSense Support] GBE toe

2009-08-25 Thread Vick Khera
On Tue, Aug 25, 2009 at 3:15 AM, Richard Sperryrich...@wrinklebrain.com wrote: Does anyone know of any Gig Ethernet tcp offload cards that are *fairly inexpensive* that work with PF? that's quite a relative term. I personally only use the Intel NICs when I have a choice, and I find them

Re: [pfSense Support] streaming video (rtsp, mms)

2009-09-22 Thread Vick Khera
On Tue, Sep 22, 2009 at 6:00 AM, Jure Pečar pega...@nerv.eu.org wrote: Upon further investigation I learned that these videos use rtsp or mms protocols, which are composed of tcp control channel and udp data channel, ititiated by the server. Client requests video via tcp and server starts

[pfSense Support] PORT command in ftp proxy

2009-10-01 Thread Vick Khera
I'm trying to figure out how to make my ftp service pass the PCI security compliance (we take credit cards, so need the compliance). I have pfSense 1.2.2 running the ftp proxy to my internal box, which is a FreeBSD 7.2 server running the stock ftpd. A probe from the outside looks like this:

Re: [pfSense Support] PORT command in ftp proxy

2009-10-01 Thread Vick Khera
On Thu, Oct 1, 2009 at 1:25 PM, Chris Buechler cbuech...@gmail.com wrote: There's quite a bit of irony in using FTP yet wanting to be PCI compliant. I suppose to some extent. However, it is the ideal tool for the job of collecting large data files from arbitrary customers who do not have their

Re: [pfSense Support] PORT command in ftp proxy

2009-10-01 Thread Vick Khera
On Thu, Oct 1, 2009 at 1:41 PM, Evgeny Yurchenko evg.yu...@rogers.com wrote: I do not believe pftpx has setting this. I would disable ftp-helper on WAN and use NAT port-forwarding top you FreeBSD ftp-server (I use pfSense in this way). How portable is this to various ftp clients? I've done

Re: [pfSense Support] NIC choice

2009-11-02 Thread Vick Khera
On Sun, Nov 1, 2009 at 9:12 PM, Ugo Bellavance u...@lubik.ca wrote: 3com 905 (xl) I'd put this on your WAN and the intel on the LAN. 3Com have been well support in FreeBSD (and even in the original 4.2BSD before that) forever. For a long while, back in the early early days of PC's running

Re: [pfSense Support] FTP proxy

2009-11-04 Thread Vick Khera
On Wed, Nov 4, 2009 at 3:01 PM, Nathan Eisenberg nat...@atlasnetworks.us wrote: Sorry for bringing this back up – what’s the correct way to implement an FTP server behind a 1:1 NAT and not receive 500 Illegal PORT command?  I don’t care if it uses the proxy, I just want incoming FTP

[pfSense Support] anyone proxying to an anonymizing vpn service

2009-11-11 Thread Vick Khera
I'm looking into some privacy VPN services like PublicVPN or StrongVPN. They offer OpenVPN based tunneling from the desktop or from your home router. What I'd like to do is set up a local proxy or port forward that would route traffic over such a VPN circuit without having to route *all* of my

Re: [pfSense Support] CARP and BGP

2009-11-14 Thread Vick Khera
On Sat, Nov 14, 2009 at 4:53 AM, Aarno Aukia aarnoau...@gmail.com wrote: We have this running in prodution, feel free to contact me off-list for details. Can people contribute these sample configurations for how do I X to the wiki? Having a lot of recipes on how to accomplish various

Re: [pfSense Support] Power Question for pfsense

2009-11-30 Thread Vick Khera
I've had my disk get corrupted exactly once in the last several years with pfSense power failure. It confused me how it could happen given that the embedded runs with the disk partition for the config mounted RO. In anycase, a manual fsck fixed it up, but it was definitely not something The Boss

Re: [pfSense Support] Is your embedded pfsense stable?

2009-12-03 Thread Vick Khera
On Thu, Dec 3, 2009 at 1:35 AM, mehma sarja mehmasa...@gmail.com wrote: 1.2.3-RC3, nanobsd on a Netgate Alix board with 256 MB RAM and a 8GB CF card. The firmware and all have been updated. I installed on a WRAP 2-ethernet system at my home the Nov 3 snapshot on Nov 3. I applied the boot

Re: [pfSense Support] NanoBSD on WRAP

2009-12-14 Thread Vick Khera
On Sun, Dec 13, 2009 at 7:49 PM, Ugo Bellavance u...@lubik.ca wrote: and I don't have much time to setup a separate freebsd/pfsense box to do the changes. A quickie VMware or VirtualBox image will do just fine. Takes about 10 minutes to install a minimal freebsd image. Add a network interface,

Re: [pfSense Support] Command in Crontab Missing

2010-01-29 Thread Vick Khera
On Fri, Jan 29, 2010 at 2:36 AM, Indrajaya Pitra Perdana viet...@indo.net.id wrote: I try to insert several command in the /etc/crontab file, but after sometimes (around 30 days) the command that i manually insert is gone, is there something that made the crontab reset as it was before ? i

Re: [pfSense Support] how does one test for stability?

2010-02-01 Thread Vick Khera
On Mon, Feb 1, 2010 at 4:50 PM, mehma sarja mehmasa...@gmail.com wrote: It would be neat to have a cron job reporting certain parameters conveying how a pfsense is running. I use to work at a company managing a hundred and a quarter FreeBSD appliances and we had a custom Control Center webpage

Re: [pfSense Support] how does one test for stability?

2010-02-04 Thread Vick Khera
On Thu, Feb 4, 2010 at 11:46 AM, mehma sarja mehmasa...@gmail.com wrote: Nagios is complex and the Reconnoiter thing looks weird. Now that I think TANSTAAFL. If your requirements involve knowing when things are not working right, you a) need to know what the baseline of working properly means,

Re: [pfSense Support] IPSec on 1.2-embedded

2010-02-10 Thread Vick Khera
On Tue, Feb 9, 2010 at 11:19 AM, Gary Buckmaster g...@s4f.com wrote:  Using 1.2.3 and setting a low DPD value should help this issue, but keep in mind that it will still be dead until the DPD value has been reached. What is this called on the GUI? I don't see anything obvious in the tunnel

Re: [pfSense Support] IPSec on 1.2-embedded

2010-02-10 Thread Vick Khera
On Wed, Feb 10, 2010 at 11:26 AM, Gary Buckmaster g...@s4f.com wrote: The field you're looking for is DPD Interval. Thanks! - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail:

Re: [pfSense Support] 1.2.3: dnsmasq and mac os x 10.6 snow leopard

2010-03-01 Thread Vick Khera
On Mon, Mar 1, 2010 at 9:45 AM, Scott Ullrich sullr...@gmail.com wrote: That does not make any sense to me.  I have quite a number of Macs and do not see this issue. Ditto. My entire home network is Macs (5 of them) and I never have seen any issues with the dns on pfsense.

Re: [pfSense Support] VPN LAN TO LAN

2010-03-05 Thread Vick Khera
On Wed, Mar 3, 2010 at 9:28 AM, Rafael Cristian Machado de Avila rcristia...@gmail.com wrote: Also not sure what kind of access will be made between the networks. Example Active Directory, File Server, administrative applications This is one of the main uses we make of pfSense. I have two

Re: [pfSense Support] OT: VLAN

2010-03-12 Thread Vick Khera
On Fri, Mar 12, 2010 at 11:13 AM, Michel Servaes mic...@mcmc.be wrote: Basically, I have a cable-tv settopbox, that needs a direct WAN Seriously? The TV box won't work behind a NAT? Them's crazy talk! I think you'll need some extra cabling here, because you really really really do not want to

Re: [pfSense Support] OT: VLAN

2010-03-12 Thread Vick Khera
On Fri, Mar 12, 2010 at 12:31 PM, Michel Servaes mic...@mcmc.be wrote: The settop box has its own private address range... where my pfsense gets a public address, the settop box has a 10.x.x.x address. (while my own LAN is 172.16.x.x). This way, my provider has it's way to track

[pfSense Support] upgrading wrap to alix

2010-05-01 Thread Vick Khera
Given that running on the WRAP requires some hackery, and does not support the dual firmware partitions, I'm planning to replace my current WRAP motherboard with the new ALIX board. I have the 2-ethernet, 2 miniPCI version of WRAP. Do I need a new enclosure to fit the ALIX? They appear to be

Re: [pfSense Support] upgrading wrap to alix

2010-05-03 Thread Vick Khera
On Sat, May 1, 2010 at 6:26 PM, Jim Pingle li...@pingle.org wrote: The ALIX boards can have a few different configurations, some of which have USB ports, so you may need to check carefully. The enclosures are really cheap though, it would probably be worth getting another given the relatively

Re: [pfSense Support] pfsense 1.23 rc3 - ipsec VPN dies randomly, but stays active in the overview

2010-05-21 Thread Vick Khera
On Fri, May 21, 2010 at 4:17 AM, Michel Servaes mic...@mcmc.be wrote: PSEC still dies silently from time to time. I have to restart racoon each and every now and then... (and I am preffering the old IPSEC sa's on all pfsense ends (which are 3 nodes now) Do you have the keepalive ping running,

[pfSense Support] making connections *to* a road-warrior openvpn host

2010-05-28 Thread Vick Khera
I have a remote desktop connected in a single-point OpenVPN connection to my office pfSense 1.2.3. That desktop can ssh/http/imap/whatever to any host in the office LAN. Any host in the office LAN however cannot ping/ssh/http/whatever to that remote IP. The only system in the office that can

Re: [pfSense Support] Re: CARP ip on different network range

2010-06-03 Thread Vick Khera
On Thu, Jun 3, 2010 at 3:06 PM, Ian Bowers iggd...@gmail.com wrote: My comment on patching was more abstract than saying Cisco is more of a fire and forget box than BSD.  a BSD box, even as a network appliance, is going to have more services listening than a cisco router.  Or at least that

Re: [pfSense Support] HELP: VPN and Static Routes

2010-06-29 Thread Vick Khera
On Tue, Jun 22, 2010 at 7:22 AM, Public Dump p...@suspiria.net wrote: I am using PFSENSE to maintain a site to site VPN between two locations. The VPN is PPTP based and PFSENSE is used on one site of the link (passive side). How'd you come to choose PPTP to connect the pair of pfSense routers?

Re: [pfSense Support] PFSENSE 2.0

2010-07-30 Thread Vick Khera
On Thu, Jul 29, 2010 at 11:54 PM, Anil Garg garg_art2...@yahoo.com wrote: I also hadn't heard of usb to serial and so will go look for that as well next time I am at best buys... Not so likely to find it there... I get them online from here: http://www.dealextreme.com/details.dx/sku.5859 They

Re: [pfSense Support] PFSENSE 2.0

2010-08-02 Thread Vick Khera
none of the devices on which I run embedded even *have* VGA, so I disagree. If you have a full system, just run the full release. On Sat, Jul 31, 2010 at 4:17 AM, Anil Garg garg_art2...@yahoo.com wrote: I think VGA with embedded is now major convenience issue.

Re: [pfSense Support] iPad ssl vpn client

2010-08-05 Thread Vick Khera
On Thu, Aug 5, 2010 at 4:28 AM, Seth Mos seth@dds.nl wrote: Viscosity on the Mac works great, but that doesn't apply to iOS. We just punt and use the PPTP client built-in to iOS. It is not really as secure as we'd like but we normally only run ssh or an https connection over it so that

Re: [pfSense Support] Ampro ReadyBoard fails to boot - Fixed

2010-08-17 Thread Vick Khera
On Sun, Aug 8, 2010 at 4:46 PM, Gerald A geraldabli...@gmail.com wrote: The litmus test would be to try booting another OS, like Windows. If Windows boots without hanging, then FreeBSD isn't handling states properly. If Windows also hangs in the same circumstances, it might be something that

Re: [pfSense Support] PTPP with Android

2010-08-17 Thread Vick Khera
On Wed, Aug 11, 2010 at 12:24 AM, Joe Laffey j...@laffey.tv wrote: I am trying to connect to a pfsense 1.2-RC1 box from an Android (Droid-X) phone. I set up the PPTP as described in the docs. I have the ips all set right, and added the firewall rule. When I try to connect, however, it

Re: [pfSense Support] Ampro ReadyBoard fails to boot - Fixed

2010-08-18 Thread Vick Khera
On Tue, Aug 17, 2010 at 5:20 PM, Cristian Ionescu-Idbohrn cristian.ionescu-idbo...@axis.com wrote: That is, you have a BIOS configuration that is incorrect, and how an OS behaves with it is undefined. How can one configure borken BIOSes? You have hardware for two serial ports, and the bios

Re: [pfSense Support] interrupt v kernel usage

2010-08-26 Thread Vick Khera
On Wed, Aug 25, 2010 at 2:20 AM, David Burgess apt@gmail.com wrote: Was I wrong to expect a drop in CPU usage with the Intel GBE? If you had a more beafy CPU, I'm sure the usage would go down. The 500MHz Geode is a puny processor relatively, so it is spending a lot more time doing the work

Re: [pfSense Support] Two site2site VPN networks with two home user VPN pools in one pfsense box

2010-08-27 Thread Vick Khera
On Fri, Aug 27, 2010 at 10:16 AM, Llaminku i...@llaminku.nl wrote: - I need to setup a pfsense box with two VPN tunnels to two (client) networks (site to site). These two networks have an overlapping address space. Can this be done? if the addresses overlap how will the router know over which

Re: [pfSense Support] QoS for Dummies?

2010-08-31 Thread Vick Khera
On Tue, Aug 31, 2010 at 12:55 AM, Glenn Kelley gl...@typo3usa.com wrote: unless something has changed - i never did find a way to do this 100%. I had a similar setup for a call center - folks doing collections of all things... anyhow - I had them spring for a 2nd cable modem and setup 2

[pfSense Support] Re: making connections *to* a road-warrior openvpn host

2010-11-09 Thread Vick Khera
On Fri, May 28, 2010 at 5:50 PM, Vick Khera vi...@khera.org wrote: That desktop can ssh/http/imap/whatever to any host in the office LAN. Any host in the office LAN however cannot ping/ssh/http/whatever to that remote IP. The only system in the office that can ping the remote is the pfSense

[pfSense Support] inconsistent handling of VPN remote endpoints

2010-11-11 Thread Vick Khera
Yesterday I was diving into why I could not connect *to* openvpn clients from the office, and discovered that having a rule that sends all LAN traffic to our WAN failover pool was interfering with that traffic. Ultimately it dawned on me that this is also the cause that I cannot originate

Re: [pfSense Support] inconsistent handling of VPN remote endpoints

2010-11-15 Thread Vick Khera
On Thu, Nov 11, 2010 at 1:26 PM, Jim Pingle li...@pingle.org wrote: IPsec does not route, OpenVPN does. That's one fundamental difference here. Another is that the policy route exclusion code can find the IPsec Could you explain the difference in behavior of the static IPsec endpoints vs. the

Re: [pfSense Support] MAC based Access Control

2010-11-29 Thread Vick Khera
On Mon, Nov 29, 2010 at 8:11 AM, Adam Piasecki apiase...@midatlanticbb.com wrote: I understand it's a false sense of security, but I can see how it would be helpful.  Maybe a package can be made with the understanding that its not 100% full proof. So you have a security feature that works,

Re: [pfSense Support] Block traffic to all but WAN

2010-12-03 Thread Vick Khera
On Fri, Dec 3, 2010 at 5:14 AM, Cyril Jaquier cyril.jaqu...@jaqpot.net wrote: I have WAN, LAN, VOIP and several VAP (WLAN0, WLAN1, etc). I would like to only allow traffic from VOIP to go through WAN and no other interfaces. I didn't find a way to do this easily and the only solution seems to

Re: [pfSense Support] Automagically changing upload/download speed for trafic shaping

2010-12-10 Thread Vick Khera
On Thu, Dec 9, 2010 at 7:29 PM, Kim C. Callis kim.cal...@gmail.com wrote: Because of a Rube Goldberg home network setup, I have to use a CLEAR device (claimed to be a 4G device, but only 3G so far.) as my WAN Are you able to get your clear modem to not NAT the real IP address?

Re: [pfSense Support] Squid Log and MAC adress

2011-01-06 Thread Vick Khera
2011/1/6 Koray AGAYA insanad...@gmail.com: I need to MAC adresses  because for details logs each computers How can I do Please help force each computer to have a fixed IP address. - To unsubscribe, e-mail:

[pfSense Support] dns forwarder failing on some hostnames

2011-01-18 Thread Vick Khera
I updated from my 1.2.3 based WRAP box to a 2.0-BETA5 (self-updated after install to have latest image from around 4am today) ALIX box earlier this afternoon. I observe the same behavior from a December 13 firmware (I made the CF card way back then). Almost everything is working. I am having

Re: [pfSense Support] dns forwarder failing on some hostnames

2011-01-19 Thread Vick Khera
On Wed, Jan 19, 2011 at 11:54 AM, Chris Buechler cbuech...@gmail.com wrote: You get both if you just use domain overrides for domains where you expect private IP responses. Domains in domain overrides are excluded since most commonly those return private IPs, generally leaving Internet DNS

Re: [pfSense Support] Hardware not supported

2011-01-26 Thread Vick Khera
2011/1/26 İhsan Doğan ih...@dogan.ch: Can I build myself an 8.2 kernel and copy it to manually to the pfSense disk? Is the kernel config that is used by pfSense somewhere available? What specifically is failing on your hardware? It could be just a matter of replacing a single device driver,

Re: [pfSense Support] Does dnsmasq have a problem with hostnames with hyphens?

2011-01-28 Thread Vick Khera
On Thu, Jan 27, 2011 at 2:10 AM, Chris Buechler cbuech...@gmail.com wrote: Has nothing to do with the hyphen, it resolves to a private IP, which is rejected by default by the DNS rebinding protection. Disable it under SystemAdvanced if you need that to work. More info in a thread on the same

Re: [pfSense Support] How to build a Developer ISO

2011-01-31 Thread Vick Khera
On Mon, Jan 31, 2011 at 10:52 AM, Mark Jones mjo...@imagehawk.com wrote: loading java is a pain on FreeBSD. not really. download from freebsdfoundation.org, install. done. if you prefer you may re-build from sources as well once you have a bootstrapping jdk installed.

Re: RE: [pfSense Support] Can't build Regular ISO either

2011-02-01 Thread Vick Khera
On Tue, Feb 1, 2011 at 11:36 AM, Mark Jones mjo...@imagehawk.com wrote: Another error is a missing dprintf which appears to come from glibc and is found on linux.  I did have the installer load the linux binary compatibility, but is there some other port I need to load to make dprintf be

Re: [pfSense Support] Buttons or menu options

2011-02-02 Thread Vick Khera
On Tue, Feb 1, 2011 at 4:07 PM, Atkins, Dwane P atki...@uthscsa.edu wrote: The latest was http://10.10.10.10/reboot.php.  I clicked on the reboot menu option and it gave me source code. Is there a way to stop this? stop clicking buttons? :) what version are you running, and what did you

Re: [pfSense Support] Restrict a web site access by remote IP address block, gain access by VPN into that block?

2011-02-09 Thread Vick Khera
On Tue, Feb 8, 2011 at 11:50 PM, Chuck Mariotti cmario...@xunity.comwrote: Now the client wants to allow a few people access to the web site while at home. Unfortunately, password protecting it is not an option. VPN access seems to be the only options but I’m wondering what the best approach

Re: [pfSense Support] pfSense 2.0 RC1 Nanobsd Problem

2011-03-07 Thread Vick Khera
On Sun, Mar 6, 2011 at 5:05 PM, Bao Ha b...@hacom.net wrote: Something happened in BETA5 and it was carried into RC1, up to today snapshot: 20110306-0859. I see this in my embedded BETA5 install at home (I should upgrade soon to RC1 I suppose...) I see no significant amount of writing to it.

Re: [pfSense Support] pfSense as subordinate CA

2011-03-23 Thread Vick Khera
On Wed, Mar 23, 2011 at 7:03 AM, Fuchs, Martin martin.fu...@trendchiller.com wrote: I’d like to use my Windows 2008R2 CA as the main CA and pfSense as a subordinate CA. When I import an existing certificate of a subordinate ca, I cannot chose this ca, when creating new certs with pfsense… (it

Re: [pfSense Support] Problem with update 1.2.3 to 2.0-RC1 Alix

2011-03-31 Thread Vick Khera
On Thu, Mar 31, 2011 at 12:56 PM, bsd b...@todoo.biz wrote: I am kind of stuck with a 1.2.3 to 2.0 upgrade on a 1Gb Alix CF card. I wanted to know how long the upgrade process is supposed to last ? … And if there is a way to import a 1.2.3 config in 2.0 ? How are you running an upgrade? I

Re: [pfSense Support] Problem with update 1.2.3 to 2.0-RC1 Alix

2011-04-01 Thread Vick Khera
On Thu, Mar 31, 2011 at 5:42 PM, bsd b...@todoo.biz wrote: I manually edited my 1.2.3 config file from the WRAP to change the interface names Ok… Why did you do so ? Do interface name get handled differently in 2.0 than in 1.2.3 ? The ALIX and WRAP boards use different network interfaces,

Re: [pfSense Support] pfSense 2.0 IPsec on Mac OS X 10.6

2011-04-11 Thread Vick Khera
On Mon, Apr 11, 2011 at 11:19 AM, Paul Mather p...@gromit.dlib.vt.eduwrote: Has anyone managed to get IPsec for mobile clients working with pfSense 2.0 and Mac OS X 10.6? If so, which client are you using on the Mac OS X side? Is anything special needed on the pfSense side? I *used* to use

Re: [pfSense Support] pfSense 2.0 IPsec on Mac OS X 10.6

2011-04-12 Thread Vick Khera
On Mon, Apr 11, 2011 at 4:46 PM, Paul Mather p...@gromit.dlib.vt.eduwrote: Plus, I don't know how well-supported OpenVPN is on devices such as the iPad and iPhone. But, in the absence of it works for me responses for IPsec on Mac OS X, I may just have to try it. :-) iOS does not have

Re: [pfSense Support] pfSense 2.0 IPsec on Mac OS X 10.6

2011-04-12 Thread Vick Khera
On Tue, Apr 12, 2011 at 11:21 AM, Vick Khera vi...@khera.org wrote: iOS does not have OpenVPN built in. I never looked to see if some app provides it, but I highly doubt it. one more point... the only VPN we've ever succeeded with iOS devices is the PPTP client, but that's just not a very

Re: [pfSense Support] pfSense 2.0 IPsec on Mac OS X 10.6

2011-04-12 Thread Vick Khera
On Tue, Apr 12, 2011 at 2:04 PM, Fuchs, Martin martin.fu...@trendchiller.com wrote: I have IPSec from my iPhone To pfsense here... Have a look at the Forums. It took some Time but now it works... I found in the forum that it requires pfSense 2.0. Does that still stand true? And do you

[pfSense Support] IPSec mobile client not passing traffic back from server

2011-05-04 Thread Vick Khera
My main office location is on static IP that has mobile IPsec clients enabled.  We were running 1.2.3 successfully.  I upgraded my home office to pfSense 2.0RC1 and everything still continued to work.  The home office was set up to VPN the whole LAN. When we upgraded the office pfSense to 2.0,

Re: [pfSense Support] IPSEC problem on pfSense 1.2.3

2011-06-01 Thread Vick Khera
On Wed, Jun 1, 2011 at 11:47 AM, Carlos Vicente cjpvice...@gmail.comwrote: My pfSense box is behind a ISP modem router, which forwards ports UDP 500 and UDP 4500 (just in case) to the WAN interface of my box (which is on the LAN interface of the router). I use DynDns (on the ISP router) to

Re: [pfSense Support] IPSEC problem on pfSense 1.2.3

2011-06-02 Thread Vick Khera
On Wed, Jun 1, 2011 at 1:12 PM, Carlos Vicente cjpvice...@gmail.com wrote: That's what I thought. Will the version 2.0 support NAT-T and IPSEC VPN supported by iPhone and iPad? I've not tried it with the iPad. However, the remote site (non fixed-IP endpoint) VPN with IPsec is not currently

Re: [pfSense Support] Diffrent Gateway Adress ( External )

2011-06-13 Thread Vick Khera
On Mon, Jun 13, 2011 at 4:03 PM, Koray AGAYA insanad...@gmail.com wrote: I tested external gateway IP on 10.0.1.12,  I learned deafult external gateway IP , go to www.whatismyip.com and result ip is 2.2.2.2 I dont want this (2.2.2.2 ) I want to go out 2.2.2.4 but I could not. because both

Re: [pfSense Support] Update hang with packages

2011-07-07 Thread Vick Khera
On Wed, Jun 29, 2011 at 8:12 PM, Volker Kuhlmann hid...@paradise.net.nz wrote: It seems I might have accidentally grabbed the snapshot though. After automatic reboot the GUI sits at packages are reinstalled in the background forever. How can I recover from that? The GUI package manager is

Re: [pfSense Support] best way to set up extra blacklist only on certain computers

2011-07-13 Thread Vick Khera
On Wed, Jul 13, 2011 at 3:38 PM, Luke Jaeger ad...@pvpa.org wrote: docs.pvpa.org redirects to www.google.com/a/pvpa.org Not directly. It goes like this: docs.pvpa.org is an alias for ghs.google.com. ghs.google.com is an alias for ghs.l.google.com. ghs.l.google.com has address 72.14.204.121

Re: [pfSense Support] which version

2011-07-28 Thread Vick Khera
On Thu, Jul 28, 2011 at 6:08 AM, Nick Upson n...@telensa.com wrote: a) the stability of 2.0 in production b) the ease of transition (hopefully I could just load a 1.2.3 backup into the 2.0) 2.0 is great. The *only* fault I have is that IPSec mobile clients are not able to transport traffic

Re: [pfSense Support] packets passed and logged in UI

2011-09-01 Thread Vick Khera
On Wed, Aug 31, 2011 at 12:49 PM, Mario Ciccarelli ad...@dtlciccarelli.it wrote: So i will wait the stable 2.0 because i have 3 pfsense with 3 ipsec channel each other far away many kilometers and i don't want to have beta problems ! :-) You're still better off with 2.0. The only issue I

[pfSense Support] PPTP not working after update on Tuesday

2011-09-01 Thread Vick Khera
Office firewall has been running 2.0-RC2 from some time in May. PPTP was working fine and dandy from iOS devices. Just click the vpn on and off you went. Yesterday I updated the firewall to the latest snapshot of RC3 (Aug 30 18:45:48). Since this time, after the PPTP connect succeeds. The

Re: [pfSense Support] PPTP not working after update on Tuesday

2011-09-01 Thread Vick Khera
On Thu, Sep 1, 2011 at 1:34 PM, Chris Buechler cbuech...@gmail.com wrote: That's from a kernel patch that was in one day's snapshots, it's since been reverted. Downgrade to something from the 29th, or early on the 30th, or upgrade to the one that'll come out in the next few hours. I'll hit up

Re: [pfSense Support] PPTP not working after update on Tuesday

2011-09-02 Thread Vick Khera
On Thu, Sep 1, 2011 at 1:34 PM, Chris Buechler cbuech...@gmail.com wrote: That's from a kernel patch that was in one day's snapshots, it's since been reverted. Downgrade to something from the 29th, or early on the 30th, or upgrade to the one that'll come out in the next few hours. Just