Re: [pfSense] OpenVPN users no access to LAN - HA pfSense Setup

2017-05-12 Thread Mark Wiater
On 5/12/2017 12:49 PM, Steve Yates wrote: -Original Message- Hey guys, last night I did my first HA installation of 2 XG-2758 appliances. It worked great, my only issue is with OpenVPN Remote Access. At first it wasn't working on the WAN VIP because I had OpenVPN listening on the

Re: [pfSense] uncomplete update to 2.3.4, no route to host

2017-05-12 Thread Jim Pingle
On 05/12/2017 12:47 PM, Steve Yates wrote: >They're missing the DNS record for pkg.pfsense.org. Per the SOA >ad...@netgate.com is the contact; I've bcc'd this there. pkg does not use A/ records, it uses SRV records, which are present and work fine: $ host -t srv

Re: [pfSense] OpenVPN users no access to LAN - HA pfSense Setup

2017-05-12 Thread Arthur Wiebe
Yeah unique subnet on both ends. And the VPN is going to whatever the master is because the user is connected to the WAN VIP, and I confirmed that the connection is active on the master pfsense unit. The problem was reproduced on multiple laptops that connect remotely. On Fri, May 12, 2017 at

Re: [pfSense] uncomplete update to 2.3.4, no route to host

2017-05-12 Thread Steve Yates
They're missing the DNS record for pkg.pfsense.org. Per the SOA ad...@netgate.com is the contact; I've bcc'd this there. -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of Stefan Fuhrmann Sent: Thursday, May 11, 2017

Re: [pfSense] smartctl supporting mSATA controller

2017-05-12 Thread WebDawg
On Fri, Apr 28, 2017 at 5:04 PM, Karl Fife wrote: > Can anyone recommend a good mSATA drive (i.e. controller chip) that > supports a full suite of smartctl commands, such as an ATA (hdparm) secure > erase, and self-test? Many have partial support, and it's really hard to >

Re: [pfSense] RFC2136 Dynamic DNS doesn't update when the "Public IP" option is set

2017-05-12 Thread Julian Heisz
Looks like it might be that I was using a custom Check IP service. Trying on a new installation of pfSense without a custom one it worked fine. On Fri, May 12, 2017 at 8:47 AM Vick Khera wrote: > On Thu, May 11, 2017 at 3:40 PM, Julian Heisz > wrote: >

[pfSense] OpenVPN users no access to LAN - HA pfSense Setup

2017-05-12 Thread Arthur Wiebe
Hey guys, last night I did my first HA installation of 2 XG-2758 appliances. It worked great, my only issue is with OpenVPN Remote Access. At first it wasn't working on the WAN VIP because I had OpenVPN listening on the interfaces instead of on the VIP, so changed it to listen on the VIP. Now I'm

Re: [pfSense] Wifi

2017-05-12 Thread Alfredo Tapia Sabogal
Vick Thank you so much!!! Regads Alfredo El may 11, 2017 1:55 PM, "Vick Khera" escribió: > 1. Assign a static IP for the device to control via the DHCP server. Force > the device to re-fetch its IP so it can get this new dedicated address. > 2. create a schedule entry in the

Re: [pfSense] RFC2136 Dynamic DNS doesn't update when the "Public IP" option is set

2017-05-12 Thread Vick Khera
On Thu, May 11, 2017 at 3:40 PM, Julian Heisz wrote: > Are you using the default public IP finder (forget the specific term > pfSense uses and not in a position to check at the moment) or do you have a > custom one set up? I have a custom one set up, which works for other

Re: [pfSense] About SSL Filtering: Squid and Squidguard.

2017-05-12 Thread Volker Kuhlmann
On Tue 09 May 2017 23:14:37 NZST +1200, José Gregorio Díaz Unda wrote: > It looks like I should use PFS only as a firewall and DNS resolver, and > setup independently DHCP and Squid. The DHCP server in pfsense is very good. With squid and squidguard I am less than impressed. It is more secure to