Re: [pfSense] Traffic shaping query

2011-10-13 Thread Adam Thompson
> -Original Message- > From: list-boun...@lists.pfsense.org [mailto:list- > boun...@lists.pfsense.org] On Behalf Of Daniel Davis > Sent: Thursday, October 13, 2011 19:14 > To: 'list@lists.pfsense.org' > Subject: [pfSense] Traffic shaping query > > Hi all. > > I am in the process of replacin

Re: [pfSense] pfSense 2.0 - Filtering traffic on OpenVPN

2011-10-13 Thread Tim Nelson
- Original Message - > In 2.0 each interface is renamed in a unique way so you do not need > dev > tun or any similar entries in the options. > > You can assign the interfaces if you want (set an IP type of 'none' on > them) and filter individually if you want, too. > > I run with two of

[pfSense] Traffic shaping query

2011-10-13 Thread Daniel Davis
Hi all. I am in the process of replacing a Fortinet firewall with a nice shiny pfSense virtual appliance and am trying to plan our traffic shaping/qos but I'm having trouble getting my head around it. We currently have 11 LAN segments and a single WAN. We are not really interested in shaping/p

[pfSense] some pptp questions

2011-10-13 Thread Eric Inazaki
Hello, I have a few questions about configuring pptp in pfsense 2.0 RELEASE. Hoping someone can clue me in. What determines the size of the pptp address pool? I got the impression from one of the how-tos that it's hard coded to a /28 subnet. If that's the case, what's the purpose of the "number

Re: [pfSense] pfSense 2.0 - Filtering traffic on OpenVPN

2011-10-13 Thread Vassilis V.
Most of the times I have had trouble with the routing and not with the firewall rules. Check if the client has the correct gateway set for the LAN subnet and check if the "push route" is added correctly. A traceroute from the client can help you see if the packets are being send through the VPN tun

Re: [pfSense] pfSense 2.0 - Filtering traffic on OpenVPN

2011-10-13 Thread Tim Nelson
- Original Message - > On Thu, Oct 13, 2011 at 16:03, Tim Nelson > wrote: > > I would expect it to work this way also. However, I've removed the > > OPT interfaces corresponding to the OpenVPN servers. Next, I've > > added one rule to 'Allow all traffic, any protocol, any source, any > > d

Re: [pfSense] pfSense 2.0 - Filtering traffic on OpenVPN

2011-10-13 Thread Daniel Llewellyn
On Thu, Oct 13, 2011 at 16:03, Tim Nelson wrote: > I would expect it to work this way also. However, I've removed the OPT > interfaces corresponding to the OpenVPN servers. Next, I've added one rule to > 'Allow all traffic, any protocol, any source, any destination, etc' the > OpenVPN tab in th

Re: [pfSense] pfSense 2.0 - Filtering traffic on OpenVPN

2011-10-13 Thread Tim Nelson
- Original Message - > On 10/12/2011 5:48 PM, Vassilis V. wrote: > > Tim Nelson wrote on 12.10.2011 23:37: > >> > >> Ah yes, that does in fact work, thanks. However, I like the idea of > >> having each VPN appear as a separate OPT for ease of rule > >> configuration. Is it safe to say this

[pfSense] Migrate RRD data between 32-bit and 64-bit systems.

2011-10-13 Thread Jeppe Øland
Since a bunch of people have asked about this, here's a quick HOWTO. First locate your current DB files. Since my box isn't running any more, I can't remember where they live - probably "/var/db/rrd" ... but if it's a full install, it could also be in "/conf/db/rrd" if I remember correctly. I did

[pfSense] Migrate RRD data between 32-bit and 64-bit systems.

2011-10-13 Thread Jeppe Øland
Since a bunch of people have asked about this, here's a quick HOWTO. First locate your current DB files. Since my box isn't running any more, I can't remember where they live - probably "/var/db/rrd" ... but if it's a full install, it could also be in "/conf/db/rrd" if I remember correctly. I did