[pfSense Support] Packets get lost inside router

2009-02-19 Thread Veiko Kukk
Hi, I have dual router configuration, 1 lan, 3 wan, 2 isp-s. port 25 is forwarded to email server in lan network. Default route is wan1. When i try to telnet from lan to wan2 port 25, i get no connection, but i can ping wan2 from lan. Telnet to wan1 and wan2 from outside works perfectly. What

[pfSense Support] APCUPSD with PFSense?

2009-02-19 Thread Christopher Myers
Hey everyone! I was curious if anyone had successfully gotten APCUPSD up and running on a PFSense box? I'm running 1.2.3 (and it's awesome by the way :) ) The reason I want to go with APCUPSD and not the NUT package is because my UPS is also powering a couple of other devices and I have APCUP

Re: [pfSense Support] Traffic shaper issues

2009-02-19 Thread Jeppe Øland
Are you saying that once you rebooted, the shaper worked as expected with the 200 kbit limit? Regards, -Jeppe On Thu, Feb 19, 2009 at 1:29 AM, Abdulrehman wrote: > I am experiencing the same issue at my side...i have 3mbit symmetric and i > had set UP/Down to 200kbit...in the start every thing w

RE: [pfSense Support] Simple question...Setting LANS Default GW

2009-02-19 Thread Marty Nelson
Chris, yes that helped out tremendously and made sense to me all at the same time! I added static routes for all of the subnets that the router does not sit on, with their gateways being their router interface. Thanks again so much for your help. -Marty From: Curtis LaMasters [mailto:curtisla

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread RB
Slicing and dicing to get context: On Thu, Feb 19, 2009 at 12:26, mikel wrote: > I think that contrackd doenst does this > > On Thu, 19 Feb 2009 13:13:00 -0600, Bill Marquette > wrote: >> All 255 protocols. If it's in state, it's sync'd. At the expense of addressing a fallacy on the wrong lis

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread mikel
Yeah!! This is a very good reason!! I think that contrackd doenst does this On Thu, 19 Feb 2009 13:13:00 -0600, Bill Marquette wrote: > On Thu, Feb 19, 2009 at 12:26 PM, mikel wrote: >> >> I ask this question, because I am favour ogf *BSD, and one friend > discuss >> me that

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Bill Marquette
On Thu, Feb 19, 2009 at 12:26 PM, mikel wrote: > > I ask this question, because I am favour ogf *BSD, and one friend discuss > me that what pfsync+carp does, is possible with contrackd. > > I have read that contrackd only syncs tcp states, and is a user space > daemon, not kernel level. > > My que

Re: [pfSense Support] Simple question...Setting LANS Default GW

2009-02-19 Thread Curtis LaMasters
Are all 3 of these network behind the LAN interface on PF or do they each have their own interface. If they have their own interface, pfSense sees the as connected routes and directs traffic accordingly, however, if they are all connected via another router behind the pfsense LAN interface, then y

RE: [pfSense Support] Simple question...Setting LANS Default GW

2009-02-19 Thread Marty Nelson
Gary, thanks for the reply. Riddle me this. I have three networks (10.x. 192.168.138.x, and 192.168.132.x) all trying to see this pfsense box and presumable get out to the Internet. How would the routing work in that scenario? Thanks, -M -Original Message- From: Gary Buckmaster [mai

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Scott Ullrich
On Thu, Feb 19, 2009 at 1:26 PM, mikel wrote: > > I ask this question, because I am favour ogf *BSD, and one friend discuss > me that what pfsync+carp does, is possible with contrackd. > > I have read that contrackd only syncs tcp states, and is a user space > daemon, not kernel level. > > My ques

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread mikel
I ask this question, because I am favour ogf *BSD, and one friend discuss me that what pfsync+carp does, is possible with contrackd. I have read that contrackd only syncs tcp states, and is a user space daemon, not kernel level. My question is, it can do all that pfsync? If yo dont know

Re: [pfSense Support] Simple question...Setting LANS Default GW

2009-02-19 Thread Gary Buckmaster
Marty Nelson wrote: I know, I know stupid question. Is the default gateway the WAN address? If not, where is it located? Thanks, -M The default gateway is the default route for traffic on that network segment to reach all remote network segments not otherwise specified in

[pfSense Support] Simple question...Setting LANS Default GW

2009-02-19 Thread Marty Nelson
I know, I know stupid question. Is the default gateway the WAN address? If not, where is it located? Thanks, -M

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Paul Mansfield
agree, this is not a linux mailing list. however, linux users might find the following script useful: http://www.zaurus.org.uk/download/scripts/nf_conntrack it gives you a useful overview of the (nat) states. I wrote it when I couldn't find anything similar and was trying to work out how a parti

Re: [pfSense Support] Bridging interfaces in pfSense embedded

2009-02-19 Thread Chris Buechler
On Thu, Feb 19, 2009 at 12:45 PM, Larry Sampas wrote: > Has anyone bridged interfaces in embedded pfSense? I was wondering if > support for bridging is compiled in the kernel. > Yes. > I am running an Alix 2d3 board, and I can't run snort locally. Being > too cheap and lazy to purchase or build

Re: [pfSense Support] pfSense state question

2009-02-19 Thread RB
On Thu, Feb 19, 2009 at 09:30, apiase...@midatlanticbb.com wrote: > icmp 192.168.10.255:54864 <- 192.168.10.11 0:0 > icmp 192.168.10.11:54864 -> 192.168.10.255 0:0 > icmp 192.168.10.255:60489 <- 192.168.10.11 0:0 > icmp 192.168.10.11:60489 -> 192.168.10.255 0:0 > I've discovered that this devic

[pfSense Support] Bridging interfaces in pfSense embedded

2009-02-19 Thread Larry Sampas
Has anyone bridged interfaces in embedded pfSense? I was wondering if support for bridging is compiled in the kernel. I am running an Alix 2d3 board, and I can't run snort locally. Being too cheap and lazy to purchase or build a tap, I'd like to bridge the external interface to the unused interfac

[pfSense Support] pfSense state question

2009-02-19 Thread apiase...@midatlanticbb.com
icmp 192.168.10.255:54864 <- 192.168.10.11 0:0 icmp 192.168.10.11:54864 -> 192.168.10.255 0:0 icmp 192.168.10.255:60489 <- 192.168.10.11 0:0 icmp 192.168.10.11:604

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread RB
On Thu, Feb 19, 2009 at 09:06, Chris Buechler wrote: > For one, you're not likely to find any Linux users here, at least not any > that are intimately familiar with Linux firewalls. Preferring to hand-roll my own rule sets and knowing the iptables packet stack nearly by heart, I'd say I am famili

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Chris Buechler
On Thu, Feb 19, 2009 at 9:44 AM, Mikel Jimenez wrote: > More tecnically reason? > > Referring to states, tracking, tcp/udp... There's a reason you aren't getting the responses you want on the OpenBSD list where you asked the exact same question and here. For one, you're not likely to find any Lin

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Mikel Jimenez
More tecnically reason? Referring to states, tracking, tcp/udp... Bill Marquette wrote: Go troll elsewhere. On Thu, Feb 19, 2009 at 5:51 AM, Mikel Jimenez wrote: Hello Is pfsync better than contrackd? Who cares, pfsense runs on FreeBSD where there be demons, not penguins. In w

Re: [pfSense Support] pfsync vs contrackd

2009-02-19 Thread Bill Marquette
Go troll elsewhere. On Thu, Feb 19, 2009 at 5:51 AM, Mikel Jimenez wrote: > Hello > > Is pfsync better than contrackd? Who cares, pfsense runs on FreeBSD where there be demons, not penguins. > In what aspects? It runs on *BSD, not linux, so yes, infinitely better. --Bill

[pfSense Support] pfsync vs contrackd

2009-02-19 Thread Mikel Jimenez
Hello Is pfsync better than contrackd? In what aspects? -- Mikel Jimenez Fernandez Irontec, Internet y Sistemas sobre GNU/LinuX - http://www.irontec.com +34 94.404.81.82 - To unsubscribe, e-mail: support-unsubscr...@pfsense.

Re: [pfSense Support] Traffic shaper issues

2009-02-19 Thread Abdulrehman
I am experiencing the same issue at my side...i have 3mbit symmetric and i had set UP/Down to 200kbit...in the start every thing was stopped...i used tcpdump on my LAN side but my Pfsense was not listening to anything...then a reboot fixed it but the problem mentioned by -Jeppe- remains same...i ha