Re: [pfSense] OpenVPN & Non-admin users.

2014-12-01 Thread Karl Fife
> We add them to the Windows built-in "Network Configuration Operators" Do you know this to work with Windows 8 Enterprise (or Win 10 for that matter)? I've seen this work in some versions of Windows, but when we tried it in Win 8 Enterprise, it didn't seem to work. We didn't probe further,

Re: [pfSense] OpenVPN & Non-admin users.

2014-12-01 Thread Stefan Baur
Am 01.12.2014 um 21:37 schrieb Karl Fife: > I'd like to poll how others have dealt with the issue of non-admin > Windows users running OpenVPN (TUN) for remote access. > > If you recall, non-admin users don't have the privileged of inserting a > routes, so even though the tunnel is is established,

Re: [pfSense] OpenVPN & Non-admin users.

2014-12-01 Thread Gordon Russell
We add them to the Windows built-in "Network Configuration Operators" group, and that gives them enough privilege to add routes, and we use the standard Openvpn client & GUI. We need for our end users to be able to bring up/down the tunnel, and so auto-starting as a service proved not workable.

Re: [pfSense] [Bulk] OpenVPN & Non-admin users.

2014-12-01 Thread PiBa
-using the OpenVPNManager (there is a checkbox to include it in the installer in the openvpnexport package) Karl Fife schreef op 1-12-2014 21:37: I'd like to poll how others have dealt with the issue of non-admin Windows users running OpenVPN (TUN) for remote access. If you recall, non-admin

[pfSense] OpenVPN Support Forum • Critical denial of service vulnerability in OpenVPN servers : Announcements

2014-12-01 Thread Kevin Tollison
https://forums.openvpn.net/topic17625.html ___ List mailing list List@lists.pfsense.org https://lists.pfsense.org/mailman/listinfo/list

[pfSense] OpenVPN & Non-admin users.

2014-12-01 Thread Karl Fife
I'd like to poll how others have dealt with the issue of non-admin Windows users running OpenVPN (TUN) for remote access. If you recall, non-admin users don't have the privileged of inserting a routes, so even though the tunnel is is established, it won't be used without an explicit route. I

Re: [pfSense] Access to WebGUI from local net blocked, why?

2014-12-01 Thread Adrian Zaugg
pfsense 2.1.5-RELEASE (amd64), nanobsd 2G On 01.12.14 15:10, Ryan Coleman wrote: > You should provide the version number of the software. > > >> On Dec 1, 2014, at 7:03 AM, Adrian Zaugg wrote: >> >> It seems the web access is only blocked from one IP in the subnet, if I >> try to connect from a

Re: [pfSense] Access to WebGUI from local net blocked, why?

2014-12-01 Thread Ryan Coleman
You should provide the version number of the software. > On Dec 1, 2014, at 7:03 AM, Adrian Zaugg wrote: > > It seems the web access is only blocked from one IP in the subnet, if I > try to connect from another IP, it works. Trying to delete or show the > blocked IPs with > > pfctl -t ss

Re: [pfSense] Access to WebGUI from local net blocked, why?

2014-12-01 Thread Adrian Zaugg
It seems the web access is only blocked from one IP in the subnet, if I try to connect from another IP, it works. Trying to delete or show the blocked IPs with pfctl -t sshlockout -T delete doesn't help. I had too many failed login attempts through XMLRPC sync from the IP in question, si