[pfSense Support] autobackup of the pfsense cluster via tftp

2010-04-12 Thread luismi
Our config here... Requirements: - Install tftp-hpa package - Install bash-static package (an error is indicated but can be ignored) - execute 'rehash' - Create the next script !#/usr/local/bin/bash fw=`hostname | cut -d. -f1` cp /cf/config/config.xml /tmp/$fw-config

[pfSense Support] strange routing behaviour with static routes, packet leak? at least packet lost.

2010-03-31 Thread luismi
Scenario /--cust vlan--\ | | B B Custrsat A--vlan FW2SAT---PFsense---vlan FW2Inet---A rinet Specific static routes defined in the pfsense

RE: [pfSense Support] Install w/o cdrom

2009-11-25 Thread luismi
I used the virtual drive of the ILO2 without problems. El mié, 25-11-2009 a las 16:41 +, Joseph L. Casale escribió: It's a lot easier to install with the drive in another machine that has a CD-ROM and then move the drive to the target machine. That's a possibility, but given I don't have

[pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread luismi
- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

Re: [pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread luismi
I called several times this around two hours ago, no reply, nice IVR, but no reply. online support at the web was also offline :P El jue, 12-11-2009 a las 17:15 -0500, Chris Buechler escribió: Not sure what you're talking about?

Re: [pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread luismi
As far as I see right now in the web: live support is offline El jue, 12-11-2009 a las 17:26 -0500, Chris Buechler escribió: On Thu, Nov 12, 2009 at 5:22 PM, luismi asturlui...@gmail.com wrote: I called several times this around two hours ago, no reply, nice IVR, but no reply. online

Re: [pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread luismi
I know I know XD El jue, 12-11-2009 a las 18:25 -0500, Scott Ullrich escribió: On Thu, Nov 12, 2009 at 6:08 PM, luismi asturlui...@gmail.com wrote: As far as I see right now in the web: live support is offline Looks online here: https://portal.pfsense.org/ Scott

[pfSense Support] raccon message: racoon: ERROR: libipsec failed pfkey align (Invalid sadb message)

2009-09-02 Thread luismi
Is there anyone here with experience with this message racoon: ERROR: libipsec failed pfkey align (Invalid sadb message)? Pfsense version is 1.2.2 and the remote side is a cisco router. Everything seems to be ok, but we have some connectivity problems with some servers and I don't know if they

Re: [pfSense Support] raccon message: racoon: ERROR: libipsec failed pfkey align (Invalid sadb message)

2009-09-02 Thread luismi
Yes I know that link and I checked my config and seems to be ok. The cisco side is: crypto isakmp policy 10 encr 3des authentication pre-share group 2 lifetime 3600 crypto isakmp key address 11.22.33.44 no-xauth crypto isakmp invalid-spi-recovery crypto isakmp keepalive 10 ! !

Re: [pfSense Support] ipsec vpn against the carp VIP address?

2009-08-28 Thread luismi
After a failover, ipsec will negotiate everything again no? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available -

[pfSense Support] ipsec vpn against the carp VIP address?

2009-08-27 Thread luismi
Hi again, I have the ipsec created between the pfsense (physical ip address) and the remote cisco (public ip address). I would like to know if it is possible to create the vpn against the CARP address, I am not sure, is that possible?

[pfSense Support] PfSense_advanced_etherchannel_and_vlan_howto_with_cisco_2900

2009-08-05 Thread luismi
Hi all, I was reviewing the document http://chaos.untouchable.net/index.php/PfSense_advanced_etherchannel_and_vlan_howto_with_cisco_2900 And I was looking for the way to do that in our pfsense 1.2.2 but I didn't see any option in the web interface, so, should it be done at low level with the

Re: [pfSense Support] PfSense_advanced_etherchannel_and_vlan_howto_with_cisco_2900

2009-08-05 Thread luismi
Yes, I didn't take note about the HEAD version, I read the document just putting focus on the Etherchannel configuration :-D From the point of view of Cisco, what type of FEC are you using? LACP? LAGP? on? El mié, 05-08-2009 a las 12:12 +0200, Aarno Aukia escribió: Hi luismi, On Wed, Aug 5

Re: [pfSense Support] syslog-ng config to record events from fws

2009-05-13 Thread luismi
PF El mar, 12-05-2009 a las 11:15 -0600, RB escribió: On Tue, May 12, 2009 at 10:59, luismi asturlui...@gmail.com wrote: Hi, well, I was looking for something more complex. http://catb.org/~esr/faqs/smart-questions.html#beprecise Ask a nebulous question, you get a nebulous answer

Re: [pfSense Support] syslog-ng config to record events from fws

2009-05-13 Thread luismi
); filter(pf-f_pptpd); destination(pf-d_pptpd); }; log { source(pf-fw2); filter(pf-f_daemon); destination(pf-d_daemon); }; log { source(pf-fw2); filter(pf-f_firewall); destination(pf-d_firewall); }; El mié, 13-05-2009 a las 06:24 -0600, RB escribió: On Wed, May 13, 2009 at 03:02, luismi asturlui

Re: [pfSense Support] syslog-ng config to record events from fws

2009-05-12 Thread luismi
Hi, well, I was looking for something more complex. El lun, 11-05-2009 a las 18:16 +0100, Michael Schmitt escribió: luismi schrieb: Hi all, Can anyone forward me a template to configure syslog-ng for pfsense logs? Thanks

[pfSense Support] syslog-ng config to record events from fws

2009-05-11 Thread luismi
Hi all, Can anyone forward me a template to configure syslog-ng for pfsense logs? Thanks - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support

RE: [pfSense Support] Template to connect a Cisco router to PFSense using IPSec

2009-04-01 Thread luismi
/IPSec_between_pfSense_and_a_Cisco_PIX -Original Message- From: luismi [mailto:asturlui...@gmail.com] Sent: Mon 3/30/2009 3:05 PM To: support@pfsense.com Subject: [pfSense Support] Template to connect a Cisco router to PFSense using IPSec Is there anyone here, in the list

[pfSense Support] Filtering by URL or regexp

2009-03-31 Thread luismi
Is possible to create rules to match URLs or regext expression? I would like to provide access just to *.foobar.com but I don't know the IPs used for that domain :-/ - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For

Re: [pfSense Support] Filtering by URL or regexp

2009-03-31 Thread luismi
Ah ok :-] El mar, 31-03-2009 a las 11:39 -0500, Gary Buckmaster escribió: luismi wrote: Is possible to create rules to match URLs or regext expression? I would like to provide access just to *.foobar.com but I don't know the IPs used for that domain

Re: [pfSense Support] Filtering by URL or regexp

2009-03-31 Thread luismi
, Michael Schuh escribió: look at squid acl-rules par example you can also generate lists to load in squid für deny or allow... 2009/3/31 luismi asturlui...@gmail.com Is possible to create rules to match URLs or regext expression? I would like to provide access

Re: [pfSense Support] Filtering by URL or regexp

2009-03-31 Thread luismi
Ok, far enough. El mar, 31-03-2009 a las 20:19 +0200, Ermal Luçi escribió: Its in 2.0 with the layer7 filter/shaper On Tue, Mar 31, 2009 at 7:09 PM, luismi asturlui...@gmail.com wrote: Hi again, I am searching with google -I am sorry, I didn't do that before- but the idea

[pfSense Support] Template to connect a Cisco router to PFSense using IPSec

2009-03-30 Thread luismi
Is there anyone here, in the list, with a template to configure a Cisco router against a pfsense firewall using ipsec? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail:

[pfSense Support] Massive static route load

2009-03-16 Thread luismi
Hi all, Is there anyway to load several static routes at the same time? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available -

Re: [pfSense Support] Massive static route load

2009-03-16 Thread luismi
, Curtis LaMasters escribió: If I understand you correctly, you can just add them from the GUI from SystemStatic Routes. If that isn't what you needed, let us know. Curtis On 3/16/09, luismi asturlui...@gmail.com wrote: Hi all, Is there anyway to load several static routes at the same