[pfSense Support] IPSEC error

2007-12-22 Thread Jaye Mathisen


I'm getting this trying to set up a tunnel between two fixed IP's.

Dec 22 22:59:36 ithcprtr1 racoon: INFO: 68.185.9.206[500] used as isakmp port 
(fd=20)
Dec 22 22:59:36 ithcprtr1 racoon: INFO: unsupported PF_KEY message REGISTER

racoon.conf looks OK, but I haven't set up IPSEC in ages...  IT's kind of just 
always worked, and I never have to mess with i.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] PPTP Server Oddity

2007-12-22 Thread Chris Buechler

Angelo Turetta wrote:

Chris Buechler wrote:

Matt Hohman wrote:
Is is a know bug to only be able to receive them on the WAN 
interface, any ideas on what I'm missing if not?


Services running locally don't work with OPT WANs at this time 
without static routes, this is a known limitation. Services NATed or 
routed on OPT WANs work fine.


The real issue is that every service running locally should allow the
user to specify which interface the service should bind to.

PPTP is one example that could be cured with a small addition to the
config file, but the most troublesome one is the FTP proxy (needs a -p
command line parameter).


It's not that simple, the reply traffic still uses the system routing 
table. Most of the services bind on all IPs already.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] PPTP Server Oddity

2007-12-22 Thread Angelo Turetta

Chris Buechler wrote:

Matt Hohman wrote:
Is is a know bug 
to only be able to receive them on the WAN interface, any ideas on 
what I'm missing if not?


Services running locally don't work 
with OPT WANs at this time without static routes, this is a known 
limitation. Services NATed or routed on OPT WANs work fine.


The real issue is that every service running locally should allow the
user to specify which interface the service should bind to.

PPTP is one example that could be cured with a small addition to the
config file, but the most troublesome one is the FTP proxy (needs a -p
command line parameter).

Angelo.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]