Re: [pfSense-discussion] A few questions

2005-07-27 Thread Bill Marquette
Not sure why, but this seems to be a very popular feature request these days, I can count at least 3 different requests for this in the last week. No need to file a feature request for this feature unless the code that comes out of the hackathon doesn't do what you want (not directed at you Chris

Re: [pfSense-discussion] A few questions

2005-07-27 Thread Chris Buechler
On 7/27/05, Randy B <[EMAIL PROTECTED]> wrote: > > > I'm not certain I understand what you're talking about - the only > load-balancing I can find described for CARP (net.inet.carp.arpbalance) > only does incoming load-balancing at L2; that's according to the latest > OpenBSD carp(4) man page I can

Re: [pfSense-discussion] A few questions

2005-07-27 Thread Randy B
Chris Buechler wrote: CARP does L3. At this point it doesn't detect dead hosts so a percentage of your requests will fail if one of the boxes dies, but that's being worked on. I'm not certain I understand what you're talking about - the only load-balancing I can find described for CARP (net.in

Re: [pfSense-discussion] A few questions

2005-07-27 Thread Chris Buechler
On 7/27/05, Craig FALCONER <[EMAIL PROTECTED]> wrote: > I can't comment on the load balancing, but pfsense will not be damaged by a > random powerout unless you're in the process of saving a config change right > then. If the power is out, you won't be reconfiguring your router :) > > That may no

Re: [pfSense-discussion] multipe ips on the wan interface?

2005-07-27 Thread Bill Marquette
On 7/27/05, Matthew Lenz <[EMAIL PROTECTED]> wrote: > - Original Message - > From: "Matthew Lenz" <[EMAIL PROTECTED]> > To: "pfsense" > Sent: Wednesday, July 27, 2005 3:42 PM > Subject: Re: [pfSense-discussion] multipe ips on the wan interface? > > > > I should have said > > > > 1. add v

[pfSense-discussion] dns forwarder and other general questions

2005-07-27 Thread Matthew Lenz
I have 4 subnet's that each have their own interfaces (LAN, OPT1, OPT2, OPT3) and are the gateway for each of the subnets. I have development and backend t1 access on the LAN net, webservers on the opt1 net, app and database servers on opt2 and the mail servers are on opt3. I intend to make it so

RE: [pfSense-discussion] A few questions

2005-07-27 Thread Craig FALCONER
I can't comment on the load balancing, but pfsense will not be damaged by a random powerout unless you're in the process of saving a config change right then. If the power is out, you won't be reconfiguring your router :) That may not hold for packages like squid... Though the worst that could ha

Re: [pfSense-discussion] multipe ips on the wan interface?

2005-07-27 Thread Matthew Lenz
- Original Message - From: "Matthew Lenz" <[EMAIL PROTECTED]> To: "pfsense" Sent: Wednesday, July 27, 2005 3:42 PM Subject: Re: [pfSense-discussion] multipe ips on the wan interface? > I should have said > > 1. add virtual ip (am I supposed to beable to select the cidr? it greys out > a

RE: [pfSense-discussion] multipe ips on the wan interface?

2005-07-27 Thread William
Bill Marquette said on Thursday, 28 July 2005 at 8:14 a.m: > > and forwarded port 80 to the private ip of my server's port 80. > > Port forwarding? > The alternative is to perform 1:1 NAT and add an accept rule to the firewall for port 80, with the default being to block all. That is, unless pf

Re: [pfSense-discussion] multipe ips on the wan interface?

2005-07-27 Thread Matthew Lenz
I should have said 1. add virtual ip (am I supposed to beable to select the cidr? it greys out and is set to /32) 2. add NAT: Port Forwarding entry using WAN, the virtual ip in step 1, tcp, from 80, my servers private ip, local port 80, checked auto add firewall rule. 3. reverified that virtual ip

Re: [pfSense-discussion] multipe ips on the wan interface?

2005-07-27 Thread Bill Marquette
On 7/27/05, Matthew Lenz <[EMAIL PROTECTED]> wrote: > say I want to have multiple ip's on the wan interface so that I can forward > http/https for one public ip to a private ip behind the firewall and > smtp/imap on a different public ip to a another private ip behind the > firewall. I thought thi

[pfSense-discussion] multipe ips on the wan interface?

2005-07-27 Thread Matthew Lenz
say I want to have multiple ip's on the wan interface so that I can forward http/https for one public ip to a private ip behind the firewall and smtp/imap on a different public ip to a another private ip behind the firewall. I thought this was what the virtual ip functionality is for. I added a v

Re: [pfSense-discussion] A few questions

2005-07-27 Thread Chris Buechler
On 7/27/05, Randy B <[EMAIL PROTECTED]> wrote: > > That said, I'd love to see a couple of bits of functionality added, but > am really not sure how to go about it. The first is an L3 load > balancer, CARP does L3. At this point it doesn't detect dead hosts so a percentage of your requests will

[pfSense-discussion] A few questions

2005-07-27 Thread Randy B
I really enjoy pfSense; it's an incredible project, and as I learn more about using/administering *BSD systems, I hope to be able to contribute more than my opinion. ;-) That said, I'd love to see a couple of bits of functionality added, but am really not sure how to go about it. The first i