[pfSense Support] DNS Forwarder/Authoritative DNS Server

2008-12-02 Thread Dimitri Rodis
On one of my networks, I have 4 Windows server domain controllers that run DNS 
for Active Directory on this network in particular.

On the services_dnsmasq.php page in pfSense, the bottom section allows you to 
specify authoritative DNS servers for domains that are not part of the internet 
(or to override for the purpose of split-brain DNS).

Let's say that this particular domain is internaldomain.local.

There are 4 authoritative DNS servers for this zone-however, the interface on 
this page only allows you to add one:

[cid:image001.gif@01C95461.5B11E4B0]

The following input errors were detected:

 *   A override already exists for this domain.


Is there a way that I can specify multiple DNS servers for a particular domain 
suffix? You should be able to, IMO.

Thanks,

Dimitri Rodis
Integrita Systems LLC

<>

[pfSense Support] Captive portal locking up?

2008-12-02 Thread Atkins, Dwane P
We are currently using 1.2 RC1 on a Dell Power Edge R200 and 1.2 Release
on a Dell Power Edge 860.

 

In the last couple of weeks, the devices has stopped working for those
who are NOT already connected.  If you are connected, you maintain the
capability to gain access.  Each time I have gone to the device, we
receive and error message:

 

IPFW2; Ipv6- unknown extension number (5), ext-hd eq 2

 

 

Why?  And is this what is stopping personnel from gaining access and is
there a fix for it?

 

Thanks


Dwane

 

 

Dwane Atkins

Senior Network Analyst

IMS-System & Network Operations 

University of Texas Health Science Center at San Antonio 

Tel: 210-567-0158

http://ims.uthscsa.edu  

 



[pfSense Support] Skype relaying

2008-12-02 Thread Joe Laffey
Is there a way to prevent Skype from relay connections using pfsense. The 
Skype "tech" page doesn't go into much detail... just that you want a p2p 
friendly firewall...



http://support.skype.com/index.php?_a=knowledgebase&_j=questiondetails&_i=127

If this can be permitted what are the security implications?


Thanks,
--
Joe Laffey|   Visual Effects for Film and Video
LAFFEY Computer Imaging   | -
St. Louis, MO |   Show Reel http://LAFFEY.tv/?e13010
USA   | -
. |-*- Digital Fusion Plugins -*-
--

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Commercial support available - https://portal.pfsense.org



RE: [pfSense Support] Skype relaying

2008-12-02 Thread Tim Dickson
I'm assuming they mean to enable UPnP...
Not sure of all the security risks, but it does allow programs to designate
ports for their use.
Others on the list probably no more details about UPnP, you can always
reference:
http://en.wikipedia.org/wiki/UPnP

-Tim

-Original Message-
From: Joe Laffey [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, December 02, 2008 5:11 PM
To: support@pfsense.com
Subject: [pfSense Support] Skype relaying

Is there a way to prevent Skype from relay connections using pfsense. The 
Skype "tech" page doesn't go into much detail... just that you want a p2p 
friendly firewall...


http://support.skype.com/index.php?_a=knowledgebase&_j=questiondetails&_i=12
7

If this can be permitted what are the security implications?


Thanks,
--
Joe Laffey|   Visual Effects for Film and Video
LAFFEY Computer Imaging   | -
St. Louis, MO |   Show Reel http://LAFFEY.tv/?e13010
USA   | -
. |-*- Digital Fusion Plugins -*-
--

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Commercial support available - https://portal.pfsense.org



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Commercial support available - https://portal.pfsense.org