Re: [pfSense] [v2.1] configuring OPT1 as hosted services firewall?

2014-02-24 Thread Brian Candler
On 24/02/2014 01:46, Ryan Coleman wrote: I think the “wiser” solution is to spin up another firewall for the shared services and give it all 4 IPs (.2-.5) I don't see a particular reason to do this, unless you want to delegate administration of the ruleset for those IPs to someone else.

Re: [pfSense] [v2.1] configuring OPT1 as hosted services firewall?

2014-02-23 Thread Ryan Coleman
I think the “wiser” solution is to spin up another firewall for the shared services and give it all 4 IPs (.2-.5) On Feb 22, 2014, at 2:55 PM, Brian Candler b.cand...@pobox.com wrote: On 22/02/2014 20:43, Brian Candler wrote: And has been pointed out already, you definitely don't want your

Re: [pfSense] [v2.1] configuring OPT1 as hosted services firewall?

2014-02-22 Thread Brian Candler
On 22/02/2014 01:13, Ryan Coleman wrote: I'm moving away from single server design on my ESXi box to dedicated guests for each service but I cannot seem to get those dedicated services through the firewall. I have a 29bit subnet (IPs 1 through 5). Everything is internal to the ESXi (5.1)

Re: [pfSense] [v2.1] configuring OPT1 as hosted services firewall?

2014-02-22 Thread Brian Candler
On 22/02/2014 20:43, Brian Candler wrote: And has been pointed out already, you definitely don't want your OPT1 IP address to be in the same range as either the LAN or WAN subnets. Each interface must be in a separate subnet. This is just how IP routing works. What may have caused

Re: [pfSense] [v2.1] configuring OPT1 as hosted services firewall?

2014-02-21 Thread Ryan Coleman
Does anyone have an ideas? Thanks! On Feb 20, 2014, at 4:04 PM, Ryan Coleman ryanjc...@me.com wrote: I’m moving away from single server design on my ESXi box to dedicated guests for each service but I cannot seem to get those dedicated services through the firewall. I have a 29bit

Re: [pfSense] [v2.1] configuring OPT1 as hosted services firewall?

2014-02-21 Thread Adam Thompson
The obvious problem is that it looks like you have two interfaces in the same subnet.  That (generally) doesn't work unless you are a routing guru in the first place and know exactly what you're doing.  Which, with apologies for bluntness, you obviously don't. The  problem isn't with pfSense,

Re: [pfSense] [v2.1] configuring OPT1 as hosted services firewall?

2014-02-21 Thread Benjamin Swatek
I have around 15 years USER experience installing a new version of Mac OS (X) onto a Mac. Around 8 years ago I managed to install Debian on a Powerbook with a lot of help and RTFM but I forgot most of it as `I am not in the business´. I re-read your mail after Adam’s mail and even I spotted