Re: [pfSense] Multiwan

2012-08-08 Thread Adam Thompson
One other way you can do it (but it's a kludge) is to have one router PER overlapping-subnet connection (probably doing 1:1 BAR), then have your main system behind those routers. That way no single router has to see overlapping entries in its routing table. Obviously, this is only cost-effectiv

Re: [pfSense] Multiwan

2012-08-08 Thread Ryan Rodrigue
Short answer is no. So basically every interface on a router must be on a separate subnet. It defines this by the network address and subnet mask. Having 2 internet accesses on the same network range but different interfaces will not work correctly. Perhaps you could change one of them to a diff

Re: [pfSense] web site access disappears

2012-08-08 Thread Kenny Armstrong
Nope. My LAN is a /29, my WAN is a /29, and my OPT1 is a /24. - Original Message - From: "Chris Buechler" To: "pfSense support and discussion" Sent: Wednesday, August 8, 2012 2:06:25 PM Subject: Re: [pfSense] web site access disappears On Wed, Aug 8, 2012 at 12:00 PM, Karmstrong

Re: [pfSense] web site access disappears

2012-08-08 Thread Chris Buechler
On Wed, Aug 8, 2012 at 12:00 PM, Karmstrong wrote: > We have run into the common problem of web site access randomly stopping. > For instance, at one of our locations google.com no longer works. At others, > yahoo.com can not be accessed. We can not pull the sites up in a browser nor > ping them.

Re: [pfSense] Multiwan

2012-08-08 Thread Tim Nelson
- Original Message - > e.g. I will be getting an internal IP of 192.168.0.20, 0.102, 0.87 > and then 1.101 for example, however all the 0.'s will have the same > 0.1 gateway yet be totally different connections to the web… Not > sure if that would matter… Every WAN needs to have a unique

Re: [pfSense] web site access disappears

2012-08-08 Thread Kenny Armstrong
Nevermind I found it, however, disabling pf scrub did not seem to alleviate the problem. - Original Message - From: "Kenny Armstrong" To: "pfSense support and discussion" Sent: Wednesday, August 8, 2012 12:42:45 PM Subject: Re: [pfSense] web site access disappears I'm not sure w

Re: [pfSense] web site access disappears

2012-08-08 Thread Kenny Armstrong
I'm not sure what that is. Where would I find that? - Original Message - From: "David Burgess" To: "pfSense support and discussion" Sent: Wednesday, August 8, 2012 12:38:55 PM Subject: Re: [pfSense] web site access disappears On Wed, Aug 8, 2012 at 10:00 AM, Karmstrong < karmstr.

Re: [pfSense] web site access disappears

2012-08-08 Thread David Burgess
On Wed, Aug 8, 2012 at 10:00 AM, Karmstrong wrote: > We have run into the common problem of web site access randomly stopping. > For instance, at one of our locations google.com no longer works. At > others, yahoo.com can not be accessed. We can not pull the sites up in a > browser nor ping them.

Re: [pfSense] Ping Wan Virtual IP Firewall Rule - Is this possible?

2012-08-08 Thread Chris Bagnall
On 8/8/12 5:15 pm, Moshe Katz wrote: We do this at my office. We have 1-to-1 NAT for our public IPs to our Servers. On WAN, we set a rule for "Allow ICMP from * to *". You may be able to get by with a more-restrictive rule but this is the one we use. We always allow ping responses from our p

Re: [pfSense] Ping Wan Virtual IP Firewall Rule - Is this possible?

2012-08-08 Thread Moshe Katz
On Wed, Aug 8, 2012 at 4:56 AM, Gavin Will wrote: > Hi there, > > ** ** > > Is it possible to ping a WAN virtual IP in Pfsense 2.0.1? > > ** ** > > We have a ppoe connection for the wan interface which occasionally changes > IP. I have a server on a bunch of 5 static virtual IPs I have.

[pfSense] Multiwan

2012-08-08 Thread Andrew @ ATMlogic.ca
Just wondering a few things about multiwan. In this case what I am wondering is can I take multiple Wifi bridges funnel them into pf, and have one Lan connection that (from what I understand) does some basic round robin load balancing. I am aware this will give me some trouble on some websites.

[pfSense] web site access disappears

2012-08-08 Thread Karmstrong
We have run into the common problem of web site access randomly stopping. For instance, at one of our locations google.com no longer works. At others, yahoo.com can not be accessed. We can not pull the sites up in a browser nor ping them. It isn't DNS since we can resolve them fine, and when we

Re: [pfSense] VM woes

2012-08-08 Thread Josh Karli
On 8/8/2012 5:35 AM, Paul Gear wrote: On 08/08/12 15:38, Josh Karli wrote: On 8/7/2012 5:36 PM, Paul Gear wrote: ... I had exactly the opposite experience with VMware & bare metal (see the thread 'Network "freezes" on IBM x3550, Broadcom NICs' starting 29 June). I found that using the E1000 dr

Re: [pfSense] 2.1 Snapshots - 'best' ones to use?

2012-08-08 Thread Jim Pingle
On 8/8/2012 7:10 AM, Chris Bagnall wrote: > In recent months I've done quite a few pfSense installs with 2.1. I've > tended to simply download the latest snapshot as and when I've needed to > image a new CF card (all our deployments are embedded). > > However, in recent days - especially after see

[pfSense] 2.1 Snapshots - 'best' ones to use?

2012-08-08 Thread Chris Bagnall
Greetings list, In recent months I've done quite a few pfSense installs with 2.1. I've tended to simply download the latest snapshot as and when I've needed to image a new CF card (all our deployments are embedded). However, in recent days - especially after seeing a post on here last week a

Re: [pfSense] VM woes

2012-08-08 Thread Paul Gear
On 08/08/12 15:38, Josh Karli wrote: > On 8/7/2012 5:36 PM, Paul Gear wrote: >> ... >> I had exactly the opposite experience with VMware & bare metal (see the >> thread 'Network "freezes" on IBM x3550, Broadcom NICs' starting 29 >> June). I found that using the E1000 driver on the vNICs worked a t

[pfSense] Ping Wan Virtual IP Firewall Rule - Is this possible?

2012-08-08 Thread Gavin Will
Hi there, Is it possible to ping a WAN virtual IP in Pfsense 2.0.1? We have a ppoe connection for the wan interface which occasionally changes IP. I have a server on a bunch of 5 static virtual IPs I have. I want to check the host is alive with nagios and therefore need to allow ping. Setting