[pfSense] Unable to route traffic between bridged interfaces

2012-01-25 Thread Ryan Sommers
First, my setup: WAN: vr0 LAN bridge0 Internal: vr1 wifi: ath0 bridge0: x.x.x.1 bridge0 members: ath0, vr1 DHCP is serving up addresses from the x.x.x network and I'm using NAT for Internet access. Everything is working correctly except that hosts on wifi can't connect to hosts on vr1.  But, Wi

Re: [pfSense] Soekris 6501 installation question

2012-01-25 Thread Robert Guerra
I've managed to successfully get pfSense installed, configured and running on a Soekris 6501. It took a while to collect all the required information needed, but the device is now up and running :) I haven't yet written up a proper blog post to describe the setup, however I have put together

Re: [pfSense] Soekris 6501 installation question

2012-01-25 Thread Jim Pingle
>> On 1/23/2012 2:33 PM, David Miller wrote: >> > On 1/23/12 1:52 PM, Jim Pingle wrote: >> > Can memsticks be used as the flash drive to run a pfsense instance on a >> > soekris, or do I need to use that to install to another type of flash on >> > the system? >> > >> Yes, but you should really be

Re: [pfSense] Soekris 6501 installation question

2012-01-25 Thread Jim Pingle
On 1/23/2012 5:44 PM, Nenhum_de_Nos wrote: > > On Mon, January 23, 2012 16:52, Jim Pingle wrote: >> Correct, the stock memstick image is VGA only. It's not meant to be run >> long-term, it's just an installer. >> >> If you're feeling lucky, I haven't heard back any input on this, but I >> made a s

Re: [pfSense] Block Rule doesnt work

2012-01-25 Thread David Burgess
On Wed, Jan 25, 2012 at 12:11 PM, Moshe Katz wrote: > He said he can access web pages so it's not even rejecting TCP. Thanks. I missed that. Jürgen, are you using a transparent proxy, like squid? I believe this will bypass your firewall rules for ports and interfaces that it listens on. db __

Re: [pfSense] Block Rule doesnt work

2012-01-25 Thread Moshe Katz
On Wed, Jan 25, 2012 at 2:08 PM, David Burgess wrote: > 2012/1/25 Jürgen Echter : > > You're using Reject rather than Block, which operates only on TCP/UDP. > Any other packet type will not match that rule. > > db > ___ > List mailing list > List@lists.

Re: [pfSense] Block Rule doesnt work

2012-01-25 Thread David Burgess
2012/1/25 Jürgen Echter : You're using Reject rather than Block, which operates only on TCP/UDP. Any other packet type will not match that rule. db ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

Re: [pfSense] Block Rule doesnt work

2012-01-25 Thread Jürgen Echter
Am 25.01.2012 16:26, schrieb Moshe Katz: Try using "Source: * (any)" instead of "Source: WLAN Net". It will only apply to WLAN traffic anyway because of which interface it applies to. It would be helpful for you to send the screenshot again WITH the left-most column - the icons OUTSIDE the t

Re: [pfSense] IPv6 and v2.1

2012-01-25 Thread Eugen Leitl
On Wed, Jan 25, 2012 at 04:57:26PM +0100, seth@dds.nl wrote: > Quoting Oliver Schad : > >> Hello, >> >> can somebody estimate when version 2.1 with IPv6 support will be >> released? One >> month, 6 months, 1 Year? > > If all goes according to plan, somewhere this spring. Which sounds vague

Re: [pfSense] IPv6 and v2.1

2012-01-25 Thread seth . mos
Quoting Oliver Schad : Hello, can somebody estimate when version 2.1 with IPv6 support will be released? One month, 6 months, 1 Year? If all goes according to plan, somewhere this spring. Which sounds vague but should be before may and definitely before World IPv6 day. You can install

Re: [pfSense] Block Rule doesnt work

2012-01-25 Thread Moshe Katz
Try using "Source: * (any)" instead of "Source: WLAN Net". It will only apply to WLAN traffic anyway because of which interface it applies to. It would be helpful for you to send the screenshot again WITH the left-most column - the icons OUTSIDE the table. Make sure your rules are actually "bloc

[pfSense] IPv6 and v2.1

2012-01-25 Thread Oliver Schad
Hello, can somebody estimate when version 2.1 with IPv6 support will be released? One month, 6 months, 1 Year? I would like to use the IPv6 stuff and don't like the idea to patch v2.0.1 manually. Regards Oli signature.asc Description: This is a digitally signed message part.