Ermal Luçi schreef:
On Thu, Sep 8, 2011 at 1:34 PM, Johan Hendriks
<[email protected]> wrote:
Once more
I am running the latest snapshot of today.
I do use the old pptp adsl way to make connection with our provider.
It works for us a really long time very well.
This works great on all versions of monowall and pfsense 1.2.3 and before.
But now with pfsense 2.0 i can not get traffic over the line.
At least no real data.
I can ping, but websites do not load or part of it, but most will not.
I am struggling with this for about 2 months now.
The thing is i see a lot of dropped packages on the vr1 interface.
This is the interface my modem is connected to and it runs on a 5501 soekris
board.
these drops looks like i have disabled the block rule of private networks
vr1 10.0.0.138 10.0.0.100 GRE
vr1 10.0.0.138 10.0.0.100 GRE
10.0.0.138 is the modem
10.0.0.100 is my WAN addres.
i have disabled the block rule of private networks
also tried all kinds of mtu settings.
Do you have your vr1 interface assigned in any way or any address
configured in it?
Afaik it should work as is, but its long time i have not used pptp as
a client so might have somthing wrong.
The way to test is to manually modify the rules.debug and include the
vr1 interface as in 1.2.3, load that ruleset and see if it works.
Well i finally made it work!!!
The downside is that it does not survive reboots.
I did the following
via the webinterface go to edit file.
I edited like you said the /tmp/rules.debug file and changed wan = {
pptp1 } to wan = { vr1 pptp1}, where vr1 is my actual WAN interface
then i executed the command through the webinterface pfctl -f
/tmp/rules.debug
I did open some tabs in Firefox, they all were timed out before the
pfctl reload.
I did a reload all tabs and all the sides loaded.
To make sure it was this firewall, i opened the traffic graph and
started downloading a iso file from an ftp server.
The graph showed the peak as long as the download lasted.
So the only thing missing is the actual interface in the wan assignment.
How can i make this through the gui !
regards
Johan Hendriks
_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list
