Re: [pfSense] Problems with VPN

2018-03-19 Thread dan
Could be wrong but I think you need to define the NAT as part of the phase-2 tunnel... Dan -Original Message- From: List On Behalf Of Thomas Kristensen Sent: 19 March 2018 13:44 To: list@lists.pfsense.org Subject: [pfSense] Problems with VPN Hey   I got this problem with my pfsense

Re: [pfSense] Wireless authentication issues after Freeradius upgrade

2018-02-16 Thread dan
version 3 from 2... The configuration for 3.0 is largely compatible with the 2.x.x configuration. However, it is NOT possible to simply use the 2.x.x configuration as-is. Instead, it should be re-created. Hope that helps. Kind regards, Dan -Original Message- From: List [mailto:list-boun

Re: [pfSense] Unable to check for updates?

2016-07-29 Thread Dan Langille
eply: > "Unable to retrieve package information." > > I have a bug or pfSense? Is this a DNS issue? Sounds like a problem I had until enabled DNS Forwarder on localhost: see https://forum.pfsense.org/index.php?topic=115197.msg641301#msg641301 <https://forum.pfsense.o

Re: [pfSense] Migrating existing install to another drive

2016-07-18 Thread Dan Langille
> On Jul 16, 2016, at 4:26 PM, Dan Langille wrote: > > On Jul 16, 2016, at 4:00 PM, Jim Thompson wrote: >> >> >> >>> On Jul 15, 2016, at 4:55 PM, Dan Langille wrote: >>> >>> I have a NetGate APU2 running pfSense 2.3. It came pre-insta

Re: [pfSense] Migrating existing install to another drive

2016-07-16 Thread Dan Langille
Ahh. Just boot from a live thumb drive & use dd. I've done that. I've never looked at my /etc/fstab ... Cheers -- Dan Langille http://langille.org/ > On Jul 16, 2016, at 4:22 PM, Benjamin E. Nichols > wrote: > > Just clone the hard disk. Easy, simple, and work

Re: [pfSense] Migrating existing install to another drive

2016-07-16 Thread Dan Langille
On Jul 16, 2016, at 4:00 PM, Jim Thompson wrote: > > > >> On Jul 15, 2016, at 4:55 PM, Dan Langille wrote: >> >> I have a NetGate APU2 running pfSense 2.3. It came pre-installed and I've >> upgraded it over the past two years. > > Pretty sure y

Re: [pfSense] Migrating existing install to another drive

2016-07-16 Thread Dan Langille
> On Jul 15, 2016, at 5:55 PM, Dan Langille wrote: > > - Oh, look at that in dmesg: If you agree with the license, set > legal.intel_ipw.license_ack=1 in /boot/loader.conf > Things seem to be working fine without that. What am I missing out on? I'm missing nothing, given

[pfSense] Migrating existing install to another drive

2016-07-15 Thread Dan Langille
mode disabled gif0: promiscuous mode disabled re2_vlan4: promiscuous mode disabled re2: promiscuous mode disabled re2_vlan5: promiscuous mode disabled re1: promiscuous mode disabled re2: promiscuous mode enabled re2_vlan3: promiscuous mode enabled gif0: promiscuous mode enabled r

Re: [pfSense] problem with bacula-client 7.0.5 binaries on pfsense 2.2

2015-02-09 Thread Dan Langille
> On Feb 9, 2015, at 2:10 PM, Jim Pingle wrote: > > On 02/09/2015 11:30 AM, Dan Langille wrote: >> There's been a bug open for 14 days regarding the configuration issues: >> >> https://redmine.pfsense.org/issues/4307 >> >> I will try the packa

Re: [pfSense] problem with bacula-client 7.0.5 binaries on pfsense 2.2

2015-02-09 Thread Dan Langille
at 11:19 AM, Brady, Mike wrote: > > Yes backups run successfully. Easiest thing to do while testing is to just > run a status client command in bconsole. Once that works you should be good > to go. > > On 2015-02-10 00:46, Dan Langille wrote: >> Before I go down that road

Re: [pfSense] problem with bacula-client 7.0.5 binaries on pfsense 2.2

2015-02-09 Thread Dan Langille
Easiest thing to do while testing is to just > run a status client command in bconsole. Once that works you should be good > to go. > > On 2015-02-10 00:46, Dan Langille wrote: >> Before I go down that road again: by working, do you mean you've >> successfully run a

Re: [pfSense] problem with bacula-client 7.0.5 binaries on pfsense 2.2

2015-02-09 Thread Dan Langille
we're working on getting fixed. > > On 2/8/2015 10:07 PM, Brady, Mike wrote: >> The Webui binaries are working for me when I do what I said in the >> forum post that I referenced. >> >> On 2015-02-09 15:02, Dan Langille wrote: >>> On Feb 8, 2015, at

Re: [pfSense] problem with bacula-client 7.0.5 binaries on pfsense 2.2

2015-02-09 Thread Dan Langille
t work, please open a > ticket on https://redmind.pfsenes.org under Packages. There are a > number of broken ones, we're working on getting fixed. > > On 2/8/2015 10:07 PM, Brady, Mike wrote: >> The Webui binaries are working for me when I do what I said in the >> forum po

Re: [pfSense] problem with bacula-client 7.0.5 binaries on pfsense 2.2

2015-02-09 Thread Dan Langille
o. > > On 2015-02-10 00:46, Dan Langille wrote: >> Before I go down that road again: by working, do you mean you've >> successfully run a backup? >> -- >> Dan Langille >> http://langille.org/ >>> On Feb 8, 2015, at 11:07 PM, Brady, Mike wrote: >&

Re: [pfSense] problem with bacula-client 7.0.5 binaries on pfsense 2.2

2015-02-09 Thread Dan Langille
Before I go down that road again: by working, do you mean you've successfully run a backup? -- Dan Langille http://langille.org/ > On Feb 8, 2015, at 11:07 PM, Brady, Mike wrote: > > The Webui binaries are working for me when I do what I said in the forum post > that I ref

Re: [pfSense] problem with bacula-client 7.0.5 binaries on pfsense 2.2

2015-02-08 Thread Dan Langille
nable to get the webui packages binaries to work. However, installing via pkg works fine, with the same configuration file. > > https://forum.pfsense.org/index.php?topic=85265.0 It was broken long before that. :) https://forum.pfsense.org/index.php?topic=66385.0 > > On 2015-02-09 11

[pfSense] problem with bacula-client 7.0.5 binaries on pfsense 2.2

2015-02-08 Thread Dan Langille
file. Disclosure: I am a committer on the Bacula project and the FreeBSD maintainer for the Bacula ports. I'm not a Bacula novice, but I would like it if someone showed me what I am doing wrong. — Dan Langille http://langille.org/ ___ pfSense ma

Re: [pfSense] Exclude an ip address from a phase 2 entry

2013-11-08 Thread Dan
On 11/08/2013 10:38 AM, Matthias May wrote: On 08/11/13 15:52, Dan wrote: Hi, I have a really annoying problem that I am trying to resolve. Assume the following subnets. Site A Internal: 10.10.0.0/16 Site B Internal: 10.50.0.0/16 Site B DMZ: x.y.z.0/24 ( Where this is a valid public subnet

[pfSense] Exclude an ip address from a phase 2 entry

2013-11-08 Thread Dan
Hi, I have a really annoying problem that I am trying to resolve. Assume the following subnets. Site A Internal: 10.10.0.0/16 Site B Internal: 10.50.0.0/16 Site B DMZ: x.y.z.0/24 ( Where this is a valid public subnet). I have an ipsec vpn setup. The first phase 2 entry allows 10.10.0.0/16

Re: [pfSense] ipsec packets in one direction are too big

2013-10-28 Thread Dan
On 10/28/2013 02:19 PM, compdoc wrote: >Any thoughts?? May not answer your question, but you did ask... I set up my first ipsec tunnel with pfSense and it has been wonderful, but I had to set System menu > Advanced > Miscellaneous tab > Enable MSS clamping on VPN traffic, and set it to 1375

[pfSense] ipsec packets in one direction are too big

2013-10-28 Thread Dan
Hi, I am stumped on this one. I have three sites. Each one connects to the other two via ipsec. I'm having an issue in only one direction, and I cannot figure out what is going on. To test, I am using the following ping command. ping -D -s 1472 Site A(10.1.0.1) - can ping site B and C

Re: [pfSense] Need help with carp failover

2013-09-27 Thread Dan
On 09/27/2013 10:43 AM, Dan wrote: On 09/27/2013 10:41 AM, Dan wrote: I am trying to get carp to fail over to my primary box. I have carp disabled on the second one server i tied doing an ifconfig vip3 down ; ifconfig vip3 up, but that didn't help. i tried changing the vhid from 3

Re: [pfSense] Need help with carp failover

2013-09-27 Thread Dan
On 09/27/2013 10:41 AM, Dan wrote: I am trying to get carp to fail over to my primary box. I have carp disabled on the second one server i tied doing an ifconfig vip3 down ; ifconfig vip3 up, but that didn't help. i tried changing the vhid from 3 to 14, but the problem persisted. I

[pfSense] Need help with carp failover

2013-09-27 Thread Dan
I am trying to get carp to fail over to my primary box. I have carp disabled on the second one server i tied doing an ifconfig vip3 down ; ifconfig vip3 up, but that didn't help. i tried changing the vhid from 3 to 14, but the problem persisted. I need to get thisbox to take over as master.

[pfSense] pfSense firmware mismatch

2013-09-25 Thread Dan
I'm perplexed.. I'm trying to get two pfsenseservers in sync, but xmlrpc iscomplaining about a firmware mismatch.. I installed both of these servers using pfSense-2.0.3-RELEASE-amd64.ova. I have not updated either of the systems (unless out of the box itdoes that automatically). How can my

Re: [pfSense] quagga module config bug

2012-08-07 Thread Dan Candea
session with a Cisco and another with a Linux Quagga. It works fine. BR -- Dan Cândea Does God Play Dice? ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

[pfSense] ECMP support for OSPF

2012-02-01 Thread Dan Candea
hello does pfsense 2.0.1 have support for ECMP? if not can I enable it? Google gives me nothing about this. I want to do multipath load balancing with OSPF thank you -- Dan Cândea Does God Play Dice? ___ List mailing list List@lists.pfsense.org http

[pfSense] gateway group as WAN gateway

2012-01-27 Thread Dan Candea
ppreciated best regards -- Dan Cândea Does God Play Dice? ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

[pfSense] webconfigurator menu

2011-10-06 Thread Dan Candea
hello first of, all great job on 2.0 version. is it possible to hide the top menu to users with limited accounts? only to show the allowed links? thank you -- Dan Cândea Does God Play Dice? ___ List mailing list List@lists.pfsense.org http