Re: [pfSense Support] When will RC1 be released

2005-10-16 Thread Chris May
Bill Marquette wrote: We're at .86.4 (which is on mirrors). There should be a .87 in the next day or two after it's had a final chance at testing by the devs. RC1, not sure where you heard we were there yet :) The fact that the tree has been tagged for version 1 means that we're just about r

Re: [pfSense Support] When will RC1 be released

2005-10-16 Thread Bill Marquette
We're at .86.4 (which is on mirrors). There should be a .87 in the next day or two after it's had a final chance at testing by the devs. RC1, not sure where you heard we were there yet :) The fact that the tree has been tagged for version 1 means that we're just about ready for beta. --Bill On

[pfSense Support] When will RC1 be released

2005-10-16 Thread Chris May
I was wondering when RC1 will be released, nothing above 66.4 has been posted on the serveres yet they are already at 67 and RC1 When will those be available on mirrors? Thx, Dwabraxus - To unsubscribe, e-mail: [EMAIL PROTECTED]

Re: [pfSense Support] Packages on WRAP

2005-10-16 Thread Bill Plein
On 10/16/05, John Cianfarani <[EMAIL PROTECTED]> wrote: Not sure if this is something you care about since you really don't want packages installed on the wrap or not.   I haven't voiced this opinion yet, but this is an opportune moment.   Due to the relatively inexpensive prices, I was conside

Re: [pfSense Support] Dynamic interfaces & pf

2005-10-16 Thread Bill Marquette
On 10/16/05, Eric Masson <[EMAIL PROTECTED]> wrote: > Bill Marquette <[EMAIL PROTECTED]> writes: > > Hi Bill, > > > Look at how OpenVPN works. Hint, you'll probably end up doing > > something along the lines of copying those files and doing a > > s/OpenVPN/ssltunnel VPN/ and changing the commands

Re: [pfSense Support] Solution: Re: [pfSense Support] VPN & NAT Traversal (CISCO VPN Client)

2005-10-16 Thread Scott Ullrich
Any chance of someone writing this up as a faq at http://faq.pfsense.org/index.php?sid=1615&lang=en&action=add ? That would be really helpful! Thanks for the follow up stephan. Scott On 10/16/05, stephan schneider <[EMAIL PROTECTED]> wrote: > > i am trying to get a (NATed) connection to an ext

Re: [pfSense Support] IPSec tunnel and Remote Desktop

2005-10-16 Thread Chris Buechler
Scott Ullrich wrote: I access SQL, RDP and many other items through my ipsec tunnel and I never change the MTU on the client. Thats a bad idea.The solution is to find out why the packets are getting frag'd. Active directory traffic does not work across my IPSEC tunnell but RDP and friend

[pfSense Support] Packages on WRAP

2005-10-16 Thread John Cianfarani
After installing a bunch of packages on the wrap (Got my nagios-plugins/nrpe to work) I noticed that it doesn’t keep a record of installed packages in /var/db/pkg like it does on the pc.   I’m guessing this is because /var/db/pkg gets mounted on /dev/md0 # df /var/db/pkg Filesystem 1K-

Re: [pfSense Support] squid

2005-10-16 Thread Szasz Revai Endre
The problem is that it SHOULD have been working the way it generated the config. Isn't it working for you? For some reason, for me, the local net conflicted with the ACL given in squid/advanced/acls/* For a fast fix, in case you got the same problem (just check squid output): - remove the "acl pf_n

Re: [pfSense Support] Dynamic interfaces & pf

2005-10-16 Thread Eric Masson
Bill Marquette <[EMAIL PROTECTED]> writes: Hi Bill, > Look at how OpenVPN works. Hint, you'll probably end up doing > something along the lines of copying those files and doing a > s/OpenVPN/ssltunnel VPN/ and changing the commands to run it to > whatever brings up your ssltunnel ppp connection.

[pfSense Support] Solution: Re: [pfSense Support] VPN & NAT Traversal (CISCO VPN Client)

2005-10-16 Thread stephan schneider
> i am trying to get a (NATed) connection to an external VPN using > > the cisco vpn client. Unfortunately it just doesn't work - > > no connection. I added the port 500 (isakmp) and allowed ESP to pass > > the firewall. But I think there's more to do to get NAT-Traversal > > to work :-( Got the

[pfSense Support] Enable GRE 47 protocol?

2005-10-16 Thread Manuj Aggarwal
I enabled a new rule to route all port 1723 traffic from my OPT1 interface (for PPTP clients). But when I try to connect to my VPN server at work - it comes back with an error stating I should enable GRE 47 protocol on the firewall. How do I do this? Pardon me for so many emails - but I am so

Re: [pfSense Support] DNS Settings for dual WAN setup

2005-10-16 Thread Scott Ullrich
Make sure all the clients are pointed to the DNS Forwarder. If the correct DNS servers are entered in each firewall then it should query upstream properly. On 10/16/05, Manuj Aggarwal <[EMAIL PROTECTED]> wrote: > I did enable it - but it did not make a difference. > > When I set the DNS to 4.2.2.

Re: [pfSense Support] DNS Settings for dual WAN setup

2005-10-16 Thread Manuj Aggarwal
I did enable it - but it did not make a difference. When I set the DNS to 4.2.2.2 and uncheck the "Allow DNS server list to be overridden by DHCP/PPP on WAN" it works fine. Any ideas? Scott Ullrich wrote: Use the built in DNS forwarder. This will force it to use the upstream DNS. Scott O

Re: [pfSense Support] Hang after few hours

2005-10-16 Thread Scott Ullrich
Or simply add another nic and don't use the onboard nvidia if this is the case. After doing a google search there are a few cases of reported problems with nvidia ethernet. On 10/16/05, Michael Lednev <[EMAIL PROTECTED]> wrote: > Hello, Michał. > > On 16 îęň˙áđ˙ 2005 ă., 18:26:38 you wrote: > >

Re: [pfSense Support] Hang after few hours

2005-10-16 Thread Michael Lednev
Hello, Michał. On 16 îęň˙áđ˙ 2005 ă., 18:26:38 you wrote: MD> Here is my hardware: MD> CPU: AMD Athlon 2500+ MD> MB: Asus A7N8X Deluxe MD> RAM: 2x256DDR TwinMOS MD> Graphic card: something on PCI MD> HDD: PATA Seagate 6,4 GB (also tried SATA WD 120GB) MD> LAN: 3Com 3c2000 1Gbit (in PCI slot) MD>

Re: [pfSense Support] squid

2005-10-16 Thread johan . forsstrom
iam kinda bad at the squid conf... what line did you remove? regards // Johan Szasz Revai Endre <[EMAIL PROTECTED]> 2005-10-15 11:26 Please respond to support@pfsense.com To support@pfsense.com cc Subject Re: [pfSense Support] squid It seems to be working now, though I did have to e

Re: [pfSense Support] DNS Settings for dual WAN setup

2005-10-16 Thread Scott Ullrich
Use the built in DNS forwarder. This will force it to use the upstream DNS. Scott On 10/16/05, Manuj Aggarwal <[EMAIL PROTECTED]> wrote: > Hi > > Since my last email about trying to setup a dual WAN setup - I have > found that there is a problem how PFSense configures DNS settings. It > uses WA

Re: [pfSense Support] Incoming connections?

2005-10-16 Thread Bill Marquette
OK, the entry is approved now. http://faq.pfsense.org/index.php?action=artikel&cat=10&id=53&artlang=en --Bill On 10/16/05, Bill Marquette <[EMAIL PROTECTED]> wrote: > I just answered this in the FAQ, but it needs to be approved still :) > Short answer is, you want to do a Port Forward for this.

Re: [pfSense Support] Incoming connections?

2005-10-16 Thread Bill Marquette
I just answered this in the FAQ, but it needs to be approved still :) Short answer is, you want to do a Port Forward for this. --Bill On 10/16/05, Manuj Aggarwal <[EMAIL PROTECTED]> wrote: > Hi > > I want to run a webserver behind PFSense. > Is there a way to allow incoming connections for a cer

Re: [pfSense Support] Hang after few hours

2005-10-16 Thread johan . forsstrom
was just gonna ask if you run on an nvidia chipset mobo (then i saw the integrated lan) had some weird problems with almost the same setup, right now iam running on an old p3 setup instead... // Johan Scott Ullrich <[EMAIL PROTECTED]> 2005-10-16 18:49 Please respond to support@pfsense.com

[pfSense Support] DNS Settings for dual WAN setup

2005-10-16 Thread Manuj Aggarwal
Hi Since my last email about trying to setup a dual WAN setup - I have found that there is a problem how PFSense configures DNS settings. It uses WAN1s DNS settings as global DNS settings for the whole system. My ISPs do not support DNS queries from another network. So when a request which is

[pfSense Support] Incoming connections?

2005-10-16 Thread Manuj Aggarwal
Hi I want to run a webserver behind PFSense. Is there a way to allow incoming connections for a certain PC on my network? e.g all incoming requests on port 80 should be served by PC with IP 10.0.0.155 Thanks Manuj - To unsu

Re: [pfSense Support] Hang after few hours

2005-10-16 Thread Scott Ullrich
Generally when this happens its FreeBSD and hardware issues. Make sure you have plug and play turned off in the bios and try to allocate the IRQ's manually to make sure that there is no sharing going on. This is really good hardware so I would think that if you play around in the BIOS some you

Re: [pfSense Support] Question about pf and ipfw...

2005-10-16 Thread Tommaso Di Donato
Thank you very very much!! ( I forgot to mention I am developing on version 0.84...) Thanx again!On 10/16/05, Scott Ullrich <[EMAIL PROTECTED]> wrote: Reinstall from scratch on the latest version.   Your IPFW module iswrong.   It should say rule based forwarding enabled.On 10/16/05, Tommaso Di Dona

Re: [pfSense Support] Question about pf and ipfw...

2005-10-16 Thread Scott Ullrich
Reinstall from scratch on the latest version. Your IPFW module is wrong. It should say rule based forwarding enabled. On 10/16/05, Tommaso Di Donato <[EMAIL PROTECTED]> wrote: > Just a question.. I would like to ask one more thing: "rule-based forwarding > disabled" in dmesg (ipfw2 (+ipv6) ini

Re: [pfSense Support] Newest Version ... ?

2005-10-16 Thread Bill Marquette
Not yet. --Bill On 10/16/05, David Strout <[EMAIL PROTECTED]> wrote: > Is there a newer release than 0.86.4 ... been > waiting for a mirror update to get the newest > 0.86.8 or 0.87 release but haven't seen anything > newer than 0.86.4 > > Just looking forward to getting the > webConfigurator use

[pfSense Support] Newest Version ... ?

2005-10-16 Thread David Strout
Is there a newer release than 0.86.4 ... been waiting for a mirror update to get the newest 0.86.8 or 0.87 release but haven't seen anything newer than 0.86.4 Just looking forward to getting the webConfigurator username update implemented. -- David L. Strout Engineering Systems Plus, LLC

Re: [pfSense Support] Question about pf and ipfw...

2005-10-16 Thread Tommaso Di Donato
Just a question.. I would like to ask one more thing: "rule-based forwarding disabled" in dmesg (ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding disabled, default to accept, logging disabled) means that pfsense kernel is compiled without this option (IP-FIREWALL_FORWARD)? Maybe

[pfSense Support] Hang after few hours

2005-10-16 Thread Michał Depa
Hi, I've set up few pfsenses and I have problem with one of them. Installation of version 0.86.4 went without any problems, system boots properly, works fine (right now it's serving 3 clients connected to OPT1 interface) but after few hours (2-5h) it just hangs. I can't access pfsense via

Re: [pfSense Support] Question about pf and ipfw...

2005-10-16 Thread Tommaso Di Donato
On 10/16/05, Bill Marquette <[EMAIL PROTECTED]> wrote: Got it, now I understand the problem (makes sense, I was wondering howit did transparent proxy w/out access to the destination IP:) ).  Sobasically, it does a state lookup on the socket connected to it and figures out what the original IP was

Re: [pfSense Support] Protocol binding to different WAN connection

2005-10-16 Thread Bill Marquette
On 10/16/05, Manuj Aggarwal <[EMAIL PROTECTED]> wrote: > Hi > > I have 2 WAN connections. The first WAN is ADSL (PPPoE). The second > connection is a high speed cable modem. I wanted to set cable modem as > the first WAN connection - but since OPT1 does not support PPPoE I was > forced to set it up

Re: [pfSense Support] VPN & NAT Traversal

2005-10-16 Thread Bill Marquette
On 10/16/05, stephan schneider <[EMAIL PROTECTED]> wrote: > Hello Folks, > > i am trying to get a (NATed) connection to an external VPN using > the cisco vpn client. Unfortunately it just doesn't work - > no connection. I added the port 500 (isakmp) and allowed ESP to pass > the firewall. But I thi

Re: [pfSense Support] Question about pf and ipfw...

2005-10-16 Thread Bill Marquette
On 10/16/05, Tommaso Di Donato <[EMAIL PROTECTED]> wrote: > > Module probably isn't loaded (it's only loaded if CP is in use I > > believe). > Mmmh, I think it is (I loaded it by hand with "kldload ipfw.ko"): > > # kldstat > Id Refs AddressSize Name > 14 0xc040 68cca0 kernel

Re: [pfSense Support] Dynamic interfaces & pf

2005-10-16 Thread Bill Marquette
On 10/16/05, Eric Masson <[EMAIL PROTECTED]> wrote: > Hello, > > I've managed to install and setup ssltunnel-client on my 0.84.6 embedded > image (should I upgrade to 0.86.4, I didn't find any changelog on the > website) > > Tunnel goes up, additionnal routes are triggered by ppp, everything's > fi

Re: [pfSense Support] Question about pf and ipfw...

2005-10-16 Thread Tommaso Di Donato
You are very kind, in responding so fast!! Module probably isn't loaded (it's only loaded if CP is in use Ibelieve).  Mmmh, I think it is (I loaded it by hand with "kldload ipfw.ko"): # kldstat Id Refs Address    Size Name  1    4 0xc040 68cca0   kernel  2   16 0xc0a8d000 55fdc    acpi.k

Re: [pfSense Support] Question about pf and ipfw...

2005-10-16 Thread Bill Marquette
On 10/16/05, Tommaso Di Donato <[EMAIL PROTECTED]> wrote: > On 10/15/05, Bill Marquette <[EMAIL PROTECTED]> wrote: > > > > Not sure I follow with the "redirection" part. But if I understand > > correctly, yes we can use both ipfw and pf in conjunction for > > different tasks. This is how our shap

Re: [pfSense Support] Question about pf and ipfw...

2005-10-16 Thread Tommaso Di Donato
On 10/15/05, Bill Marquette <[EMAIL PROTECTED]> wrote: Not sure I follow with the "redirection" part.  But if I understandcorrectly, yes we can use both ipfw and pf in conjunction fordifferent tasks.  This is how our shaper code used to work - define the queues in PF and assign the traffic in IPFW

[pfSense Support] Dynamic interfaces & pf

2005-10-16 Thread Eric Masson
Hello, I've managed to install and setup ssltunnel-client on my 0.84.6 embedded image (should I upgrade to 0.86.4, I didn't find any changelog on the website) Tunnel goes up, additionnal routes are triggered by ppp, everything's fine 'til this point. I can't use ppp0 tunnel as pf drops traffic,

Re: [pfSense Support] VPN & NAT Traversal

2005-10-16 Thread stephan schneider
I forgot Firewall>NAT>Outbound: Enable IPSec passthru is enabled - don't know if that option has an influence on the problem - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

[pfSense Support] VPN & NAT Traversal

2005-10-16 Thread stephan schneider
Hello Folks, i am trying to get a (NATed) connection to an external VPN using the cisco vpn client. Unfortunately it just doesn't work - no connection. I added the port 500 (isakmp) and allowed ESP to pass the firewall. But I think there's more to do to get NAT-Traversal to work :-( According to

[pfSense Support] Protocol binding to different WAN connection

2005-10-16 Thread Manuj Aggarwal
Hi I have 2 WAN connections. The first WAN is ADSL (PPPoE). The second connection is a high speed cable modem. I wanted to set cable modem as the first WAN connection - but since OPT1 does not support PPPoE I was forced to set it up this way. My SMTP server and NEWS servers are available fro