Re: [pfSense] MultiWAN: one for Skype and the other for the rest of the traffic

2011-10-07 Thread Greg Hennessy
Apply the group policy ADM settings for Skype, works on all versions, turns off 
supernode and mitigates a lot of the other bandwidth eating/security risks.
Otherwise your firewall logs will just fill up with failed UDP egress attempts 
from everything running it.

Greg



From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On 
Behalf Of Adam Thompson
Sent: 08 October 2011 9:40 AM
To: 'pfSense support and discussion'
Subject: Re: [pfSense] MultiWAN: one for Skype and the other for the rest of 
the traffic

You could also use the Business Edition of Skype, which does give you a lot 
more control over how it uses your network.  But then it’s not free, and I 
can’t imagine any other reason you’d want to use Skype.

-Adam Thompson
athom...@athompso.net


From: list-boun...@lists.pfsense.org 
[mailto:list-boun...@lists.pfsense.org]
 On Behalf Of Danny
Subject: [pfSense] MultiWAN: one for Skype and the other for the rest of the 
traffic

Hi,
I´m trying to setup a pfsense 2.0 firewall connected to 2 DSL routers.
The purpose is to send Skype traffic via one DSL, and the rest of the traffic, 
via the other one.
Any ideas on how to achieve this?
Every PC located on local LAN could use skype so is not possible filter by 
source.
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] MultiWAN: one for Skype and the other for the rest of the traffic

2011-10-07 Thread Adam Thompson
You could also use the Business Edition of Skype, which does give you a lot 
more control over how it uses your network.  But then it’s not free, and I 
can’t imagine any other reason you’d want to use Skype.

 

-Adam Thompson

  athom...@athompso.net

 

 

From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On 
Behalf Of Danny
Subject: [pfSense] MultiWAN: one for Skype and the other for the rest of the 
traffic

 

Hi,

I´m trying to setup a pfsense 2.0 firewall connected to 2 DSL routers.

The purpose is to send Skype traffic via one DSL, and the rest of the traffic, 
via the other one.

Any ideas on how to achieve this?

Every PC located on local LAN could use skype so is not possible filter by 
source.

___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Multiwan with same gateway

2011-10-07 Thread Joseph L. Casale
>If you just need to utilize the IPs, couldn't you use a Virtual IP? If they 
>are reserved,
>I don't see a reason setting them up statically on your side would be an issue.
>-Tim

Becuase the crappy isp (Telus) only grants access once the IP is fetched from a 
 dhcp
server.

As far as I know, you cant have a vip thats dhcp based, or at least I dont 
think you can
have more than one dynamic ip per nic?

Thanks Scott and Tim,
jlc



___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Multiwan with same gateway

2011-10-07 Thread Tim Dickson
>I have a situation where I need a multiple wan ip addresses, the site has 
>several reserved ip's handed out by a dhcp server, but they all share the same 
>gateway.

If you just need to utilize the IPs, couldn't you use a Virtual IP? If they are 
reserved, I don't see a reason setting them up statically on your side would be 
an issue.
-Tim

___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Multiwan with same gateway

2011-10-07 Thread Scott Ullrich
2011/10/7 Joseph L. Casale :
>
> I have a situation where I need a multiple wan ip addresses, the site has 
> several
> reserved ip’s handed out by a dhcp server, but they all share the same 
> gateway.
>
> I'm not aware of any way this with multiple opt interfaces, a virtual ip 
> won't work
> as far as I know since its needs it ip dynamically assigned.
>
> Any ideas around this scenario?

Put some kind of gateway in front of the other connection and nat back
to pfS so it has a diff gateway IP.  Otherwise I am not sure there are
any workarounds for this situation.

Scott
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


[pfSense] Multiwan with same gateway

2011-10-07 Thread Joseph L. Casale

I have a situation where I need a multiple wan ip addresses, the site has 
several
reserved ip’s handed out by a dhcp server, but they all share the same gateway.

I'm not aware of any way this with multiple opt interfaces, a virtual ip won't 
work
as far as I know since its needs it ip dynamically assigned.

Any ideas around this scenario?
 
Thanks,
jlc
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] forum.pfsense.org not sending activation e-mails

2011-10-07 Thread Peder Rovelstad
 

 

From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org]
On Behalf Of Chris Buechler
Sent: Friday, October 07, 2011 4:04 AM
To: pfSense support and discussion
Subject: Re: [pfSense] forum.pfsense.org not sending activation e-mails

 

P.S.  I don't seem to be the only one with this issue:
http://comments.gmane.org/gmane.comp.security.firewalls.pfsense.support/1711
3


heh  one person 2 years ago, the 10,000 people who have registered since
then disagree. 

 

FWIW, I attempted to register under a new address and got the same result.
Have a great day.

 

 

___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] MultiWAN: one for Skype and the other for the rest of the traffic

2011-10-07 Thread Seth Mos
Hi,

Op 7 okt 2011, om 09:32 heeft Danny het volgende geschreven:

> Hi,
> 
> The purpose is to send Skype traffic via one DSL, and the rest of the 
> traffic, via the other one.

because skype uses basically random ports and random ips until it can establish 
a connection that is pretty hard.

If you think about it the other way, send skype out the default, then make a 
policy route for all the "normal" traffic like http and such you can indentify.

Note that this will not cover all cases since Skype will also use port 80 and 
443 if it has the chance which means it will go out the other direction too.

Cheers,

Seth___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] forum.pfsense.org not sending activation e-mails

2011-10-07 Thread Chris Buechler
On Thu, Oct 6, 2011 at 1:35 PM, Seb  wrote:

> **
> Hi,
>
> I tried to register for pfSense forums (here
> http://forum.pfsense.org/index.php?action=register) and I never get the
> activation e-mail.  I've checked my spam folders, and the e-mail server logs
> and the e-mail never reaches the e-mail server.  If I try and login it says:
>
> *Your email address needs to be validated before you can login. **Need
> another activation 
> email?*
>
> So I click on 'Need another activation e-mail' and it says:
>
> An Error Has Occurred!
>   A new activation email has successfully been sent.
>
> So which is it?  An error?  Or a success?  I'm fairly sure it's an error as
> I still don't get the e-mail! ;)
>

Not sure as the email you sent this from doesn't have an account. Send me
the address you've registered under.



>  P.S.  I don't seem to be the only one with this issue:
> http://comments.gmane.org/gmane.comp.security.firewalls.pfsense.support/17113
>

heh  one person 2 years ago, the 10,000 people who have registered since
then disagree.
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Missing bits of webConfigurator load balancing UI in 1.2.3-RELEASE

2011-10-07 Thread Chris Buechler
On Thu, Oct 6, 2011 at 10:19 PM, Casey Forbes  wrote:
> Hi all,
>
> I just set up the load balancing feature with a virtual server and a
> failover server (great feature!) and I ran into a problem.
>
> My pool is working but I can no longer configure it.
>
> The "Pools" tab at /status_slbd_pool.php is completely blank. I can't edit
> my pool.
>
> The "Virtual Servers" tab shows my server asn "Online" but there are not
> edit or add buttons so I can't edit the settings or add more.
>

Status>Load Balancer is status only. Services>Load Balancer is where
you configure it.
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


[pfSense] MultiWAN: one for Skype and the other for the rest of the traffic

2011-10-07 Thread Danny
Hi,

I´m trying to setup a pfsense 2.0 firewall connected to 2 DSL routers.

The purpose is to send Skype traffic via one DSL, and the rest of the
traffic, via the other one.

Any ideas on how to achieve this?

Every PC located on local LAN could use skype so is not possible filter by
source.

Thanks
Best Regards

-- 
dpc
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list