Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-19 Thread Crystal Kolipe
On Thu, May 19, 2022 at 09:35:53AM -, Stuart Henderson wrote: > On 2022-05-19, Jordan Geoghegan wrote: > > I've run pfsync + CARP for a number of years now. One interesting > > "gotcha" I discovered when building an IPv6-only test network was that > > pfsync does not work in an IPv6-only

Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-19 Thread Stuart Henderson
On 2022-05-19, Jordan Geoghegan wrote: > I've run pfsync + CARP for a number of years now. One interesting > "gotcha" I discovered when building an IPv6-only test network was that > pfsync does not work in an IPv6-only environment. I tried both unicast > and multicast configurations to no

Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-19 Thread Jordan Geoghegan
On 5/11/22 12:32, Tom Smyth wrote: Hello Folks, We are updating some course material for an upcoming PF firewall course, and I would like to put a call out to those who use PFsync in a redundant firewall cluster about your user experience, have you come across any edge cases? have you any

Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-14 Thread Tom Smyth
Hello all, Thanks for the feedback it is really helpful to have peoples experiences in the wild to help feed into the training course content. and certainly better than just my humble experience I really appreciate all of your feedback. Thanks again folks, Tom Smyth Tom Smyth On Fri, 13 May

Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-13 Thread Stuart Henderson
On 2022-05-13, Marko Cupać wrote: > The only problem I currently have with pfsync is the fact that it does > not synchronise queue membership of states. IIRC this is meant to work but only if you have identical rulesets, after expanding interface addresses etc. This will require some care in

Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-12 Thread Lyndon Nerenberg (VE7TFX/VE6BBM)
Nick Holland writes: > Wrote a little script which, when run: Good grief, man! Just put the pf.conf in CVS and push it with rdist. We do that for all our carped firewall pairs and it works a treat. The following 'special' command in the Distfile will give you a failsafe reload of the pf rules:

Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-11 Thread Markus Wernig
Hi Tom On 5/11/22 21:32, Tom Smyth wrote: We are updating some course material for an upcoming PF firewall course, and I would like to put a call out to those who use PFsync in a redundant firewall cluster The one thing that immediately comes to mind is to NOT use a crossover cable for the

Re: calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-11 Thread Nick Holland
On 5/11/22 3:32 PM, Tom Smyth wrote: Hello Folks, We are updating some course material for an upcoming PF firewall course, and I would like to put a call out to those who use PFsync in a redundant firewall cluster about your user experience, have you come across any edge cases? have you any

calling all PFsync users for experience, gotchas, feedback, tips and tricks

2022-05-11 Thread Tom Smyth
Hello Folks, We are updating some course material for an upcoming PF firewall course, and I would like to put a call out to those who use PFsync in a redundant firewall cluster about your user experience, have you come across any edge cases? have you any tips or tricks about PFSync. have you come