Re: [pfSense] OpenVPN connects fine, no internet

2014-12-11 Thread Volker Kuhlmann
did you configure tunnelblick to send *all* traffic to the vpn? if so, you have to add allow rules to the openvpn interface to permit that traffic, and probably set up a NAT on there as well. If the network the client is connecting from (e.g. while travelling) is in any way not totally

Re: [pfSense] Aliases are auto-deleted

2014-12-11 Thread Volker Kuhlmann
On Thu 11 Dec 2014 01:51:32 NZDT +1300, Vick Khera wrote: If you're using my DNS zone to generate a block list for my IPs I can make those names return anything I want and get through anyway. I use hostnames in rules to permit my home office (which has a dynamic IP) to administer the

Re: [pfSense] OpenVPN connects fine, no internet

2014-12-11 Thread Kostas Backas
Agreed. That is the reason that I do not need it. What I need is to find out why connected clients to vpn do not have Internet access. Is it an issue with the tunnelblick client in os x or do I need to fix something in the Pfsense box? Best regards Kostas Sent from my iPhone On 11 Δεκ 2014,

Re: [pfSense] OpenVPN connects fine, no internet

2014-12-11 Thread Vick Khera
On Thu, Dec 11, 2014 at 5:37 AM, Kostas Backas kos...@i-system.gr wrote: Is it an issue with the tunnelblick client in os x or do I need to fix something in the Pfsense box? We don't know what you did, still, so we have no clue. Did you or did you not tell tunnelblick to send all traffic to

Re: [pfSense] Client-Side 1:1 NAT for IP address conflicts w/ VPN

2014-12-11 Thread Jim Pingle
On 12/10/2014 07:34 AM, Chris Bagnall wrote: On 10/12/14 6:36 am, Chris L wrote: That’s actually your fault for using 10/8, not Comcast's. Even if they were to use something like 10.58.223.0/24 they’d still conflict with your 10/8. There are so many different brands and models of consumer

Re: [pfSense] OpenVPN connects fine, no internet

2014-12-11 Thread Kostas Backas
Thank you, I don't want to route all traffic. I just want to find out why connected clients cannot access the internet. Best regards Kostas Στάλθηκε από το iPad μου 11 Δεκ 2014, 7:19 μ.μ., ο/η Karl Fife karlf...@gmail.com έγραψε: The VPN should protect from all MITM attacks and snooping

Re: [pfSense] OpenVPN connects fine, no internet

2014-12-11 Thread Vick Khera
On Thu, Dec 11, 2014 at 1:30 PM, Kostas Backas kos...@i-system.gr wrote: I don't want to route all traffic. Ok we now know you don't want to do this. We still don't know if you actualy did it on your client config. Try this... On your mac, with the vpn on, run traceroute -n www.google.com and

Re: [pfSense] 2.2 Release Candidate now available!

2014-12-11 Thread Volker Kuhlmann
Would you like tickets or a quick problem list here? 2.2-RC (amd64) built on Thu Dec 11 03:41:41 CST 2014 FreeBSD 10.1-RELEASE-p1 (In virtualbox 4.2.6) squid3 installs, but doesn't start. From system log: php-fpm[89961]: /pkg_edit.php: The command '/usr/pbi/squid-amd64/local/sbin/squid

[pfSense] Traffic routing issue

2014-12-11 Thread Ryan Clough
I am hoping that one of you out there can assist me with this rather interesting problem I am having. Let me set the stage. I am running the latest stable version of pfSense: 2.1.5-RELEASE (amd64) built on Mon Aug 25 07:44:45 EDT 2014 FreeBSD 8.3-RELEASE-p16 I am running transparent Squid and