[pfSense] Traffic routing issue

2014-12-11 Thread Ryan Clough
I am hoping that one of you out there can assist me with this rather interesting problem I am having. Let me set the stage. I am running the latest stable version of pfSense: 2.1.5-RELEASE (amd64) built on Mon Aug 25 07:44:45 EDT 2014 FreeBSD 8.3-RELEASE-p16 I am running transparent Squid and Squ

Re: [pfSense] 2.2 Release Candidate now available!

2014-12-11 Thread Volker Kuhlmann
Would you like tickets or a quick problem list here? 2.2-RC (amd64) built on Thu Dec 11 03:41:41 CST 2014 FreeBSD 10.1-RELEASE-p1 (In virtualbox 4.2.6) squid3 installs, but doesn't start. From system log: php-fpm[89961]: /pkg_edit.php: The command '/usr/pbi/squid-amd64/local/sbin/squid -

Re: [pfSense] OpenVPN connects fine, no internet

2014-12-11 Thread Vick Khera
On Thu, Dec 11, 2014 at 1:30 PM, Kostas Backas wrote: > I don't want to route all traffic. Ok we now know you don't want to do this. We still don't know if you actualy did it on your client config. Try this... On your mac, with the vpn on, run "traceroute -n www.google.com" and see where the t

Re: [pfSense] OpenVPN connects fine, no internet

2014-12-11 Thread Kostas Backas
Thank you, I don't want to route all traffic. I just want to find out why connected clients cannot access the internet. Best regards Kostas Στάλθηκε από το iPad μου 11 Δεκ 2014, 7:19 μ.μ., ο/η Karl Fife έγραψε: > >>The VPN should protect from all MITM attacks and snooping between the VPN >

Re: [pfSense] OpenVPN connects fine, no internet

2014-12-11 Thread Karl Fife
>>The VPN should protect from all MITM attacks and snooping between the VPN client and server. This is a great idea, but I find that routing all traffic through VPN causes problems in marginal (lossy or congensted) networks. I'm curious to know if others have also had this pain point, and whe

Re: [pfSense] Client-Side 1:1 NAT for IP address conflicts w/ VPN

2014-12-11 Thread Jim Pingle
On 12/10/2014 07:34 AM, Chris Bagnall wrote: > On 10/12/14 6:36 am, Chris L wrote: >> That’s actually your fault for using 10/8, not Comcast's. >> Even if they were to use something like 10.58.223.0/24 they’d still >> conflict with your 10/8. > > There are so many different brands and models of co

Re: [pfSense] OpenVPN connects fine, no internet

2014-12-11 Thread Vick Khera
On Thu, Dec 11, 2014 at 5:37 AM, Kostas Backas wrote: > Is it an issue with the tunnelblick client in os x or do I need to fix > something in the Pfsense box? > We don't know what you did, still, so we have no clue. Did you or did you not tell tunnelblick to send all traffic to the VPN tunnel?

Re: [pfSense] OpenVPN connects fine, no internet

2014-12-11 Thread Kostas Backas
Agreed. That is the reason that I do not need it. What I need is to find out why connected clients to vpn do not have Internet access. Is it an issue with the tunnelblick client in os x or do I need to fix something in the Pfsense box? Best regards Kostas Sent from my iPhone On 11 Δεκ 2014,

Re: [pfSense] Aliases are auto-deleted

2014-12-11 Thread Volker Kuhlmann
On Thu 11 Dec 2014 01:51:32 NZDT +1300, Vick Khera wrote: > > If you're using my DNS zone to generate a block list for my IPs I can > > make those names return anything I want and get through anyway. > I use hostnames in rules to permit my home office (which has a dynamic IP) > to administer the

Re: [pfSense] OpenVPN connects fine, no internet

2014-12-11 Thread Volker Kuhlmann
> did you configure tunnelblick to send *all* traffic to the vpn? if so, you > have to add allow rules to the openvpn interface to permit that traffic, > and probably set up a NAT on there as well. If the network the client is connecting from (e.g. while travelling) is in any way not totally trust