Re: [pfSense] Is there a would it pass/what-if capability?

2013-03-21 Thread Bryan D.
Does pfSense have a crowd funding page for projects (I've never seen one)?  
At the risk of creating more work for someone, having a page that lists 
something such as project name and description, funding requirement, estimated 
delivery method and timing once funded along with some buttons to allow 
contributions via credit card and PayPal funds could go a long way to getting 
things like this rolling.

If it was me, I'd have the start of each potential crowd funded project be a 
forum and list announcement of a set-time interest survey (say 1 week) that 
would allow people to express how much money they'd be willing to donate and 
that would give an idea of the viability of the request as a crowd-funded 
effort.  I wouldn't be surprised if some such open-source web software already 
exists.

I'd definitely be willing to contribute a small amount to such a would it 
pass/what-if capability to be added to pfSense.  While I'm a little surprised 
that something like this doesn't already exist, given its obvious value, I'd 
also guess that it'd be a rather involved task.


On 2013-Mar-20, at 11:16 AM, Jim Pingle li...@pingle.org wrote:

 On 3/20/2013 1:58 PM, Bryan D. wrote:
 Thanks.  I was hoping someone, likely the pfSense guys if it didn't already 
 exist, had developed a command/tool that would allow one to ask pf's 
 filtering mechanisms whether this could talk to that via the current 
 config/rules.  It seems that this would be not only invaluable for (at least 
 preliminary) testing, but would also be good for admins to check whether 
 they seem to have gotten things configured correctly.
 
 Doesn't exist yet, but it's something we've thought about.
 
 http://redmine.pfsense.org/issues/2771
 
 If someone wants to code it or fund it, it might show up in a release
 sooner rather than later...
 
 Jim

___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Is there a would it pass/what-if capability?

2013-03-20 Thread mayak-cq
On Tue, 2013-03-19 at 23:19 -0700, Bryan D. wrote:

 I've searched both the list archives and forums, though I wasn't sure what 
 phrase would yield results, and have not found an answer to the question:
 ---
 Is there a way to ask pfSense something like would a UDP|TCP packet 
 arriving on interface port from IP address be passed to IP address on 
 interface port?
 
 In short, is there a way to quickly test the rule/NAT behavior (i.e., without 
 actually having created the subject WAN setup)?

hi bryan,

i use nmap setting source and destination ports -- i run nmap on boxes
infront of and behind pfsense.

i am not aware a `tool` that does this.

cheers

m
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] Is there a would it pass/what-if capability?

2013-03-20 Thread Bryan D.
Thanks.  I was hoping someone, likely the pfSense guys if it didn't already 
exist, had developed a command/tool that would allow one to ask pf's filtering 
mechanisms whether this could talk to that via the current config/rules.  It 
seems that this would be not only invaluable for (at least preliminary) 
testing, but would also be good for admins to check whether they seem to have 
gotten things configured correctly.

Bryan D.
http://www.derman.com/
 

On 2013-Mar-20, at 2:51 AM, mayak-cq ma...@australsat.com wrote:

 On Tue, 2013-03-19 at 23:19 -0700, Bryan D. wrote:
 
 I've searched both the list archives and forums, though I wasn't sure what 
 phrase would yield results, and have not found an answer to the question:
 ---
 Is there a way to ask pfSense something like would a UDP|TCP packet 
 arriving on interface port from IP address be passed to IP address 
 on interface port?
 
 In short, is there a way to quickly test the rule/NAT behavior (i.e., 
 without actually having created the subject WAN setup)?
 
 hi bryan,
 
 i use nmap setting source and destination ports -- i run nmap on boxes
 infront of and behind pfsense.
 
 i am not aware a `tool` that does this.
 
 cheers
 
 m
 ___
 List mailing list
 List@lists.pfsense.org
 http://lists.pfsense.org/mailman/listinfo/list

___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list