Re: [pfSense Support] How do I break down a /22 into smaller subnets to use behind(LAN) side of my pfsense box
On 05.10.10 20:43, Adam Thompson wrote: (On an unrelated note - anyone know why I can't send emails to this list from my BlackBerry? Works for other mailman-managed lists elsewhere...) As I remember this is not mailman. It is ezmlm. And I cannot send mails from my regular account too. Because we do SRS and ezmlm is not aware of this. Maybe Your BB sends SRS or BATV envelopes.. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Proxy Question
Op 5-10-2010 20:58, Anil Garg schreef: At my work, I have to enter: proxy.sucks.com:80 under the ToolsOptionsnetworkconnectionssettings I would suggest setting up a proxy wpad host at work that provides the clients with that information. Setup a wpad.sucks.com website that has a wpad.dat file with the javascript proxy configuration script. When you get home the site doesn't exist and it just works. Regards, Seth - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
[pfSense Support] Siproxd
Hi, I need to configure siproxd as Sip proxy for external users. Trixbox --- Pfsense Internet-Sip users - LAN Thanks, -- Belkhiria Aymen
[pfSense Support] DDNS updates not working
I've noticed this for a while (at least the last two months) and just had never bothered to jump in and say anything. Currently on the 2.0-BETA4 embedded platform, image dated 2010/09/20 22:40:28. So far as I can tell, the cron job for updating the DDNS entries isn't being run. When I visit the page hours after my IP has changed, the cached IP shows in red (recognizing that it's out of date), but I have to manually edit/save the entry for it to be updated. I've not dug into it any farther than this, but has anyone noticed this? Using DynDNS(static) and an IP that randomly changes every 1-7 days. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] DDNS updates not working
On Wed, Oct 6, 2010 at 4:02 PM, RB aoz@gmail.com wrote: I've noticed this for a while (at least the last two months) and just had never bothered to jump in and say anything. Currently on the 2.0-BETA4 embedded platform, image dated 2010/09/20 22:40:28. So far as I can tell, the cron job for updating the DDNS entries isn't being run. There isn't one that updates your IP. That's kicked off from which ever process renews your WAN IP, which depends on what kind of WAN it is. What kind of WAN is it? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] DDNS updates not working
On Wed, Oct 6, 2010 at 08:31, Chris Buechler cbuech...@gmail.com wrote: So far as I can tell, the cron job for updating the DDNS entries isn't being run. There isn't one that updates your IP. That's kicked off from which ever process renews your WAN IP, which depends on what kind of WAN it is. What kind of WAN is it? Curious - there's a cron job set for 01:01 that runs /etc/rc.dyndns.update, which seems to be calling the right functions. Not as often as I'd thought at first glance, but enough for my purposes. If it's kicked off from renewal of the WAN, that's my problem - it's a static RFC1918 IP. Reason being that I'm using VDSL and must therefore use the telco's hardware since there's none available to directly attach to pfSense. I'll look at seeing if I can set the modem into bridge mode so I can use PPPoE from the pfSense box, but if need be I'll submit a bug/feature request to have polled DDNS updates. Thoughts? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Proxy Question
Just a minor problem is that in my company they have 100,000 desktops/laptops and IT is high up in hierarchy. Anil Garg +1 408-221-7725 From: Seth Mos seth@dds.nl To: support@pfsense.com Sent: Wed, October 6, 2010 2:06:44 AM Subject: Re: [pfSense Support] Proxy Question Op 5-10-2010 20:58, Anil Garg schreef: At my work, I have to enter: proxy.sucks.com:80 under the ToolsOptionsnetworkconnectionssettings I would suggest setting up a proxy wpad host at work that provides the clients with that information. Setup a wpad.sucks.com website that has a wpad.dat file with the javascript proxy configuration script. When you get home the site doesn't exist and it just works. Regards, Seth - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Proxy Question
Thanks Dan. Appreciate it. I suppose the trick is in web interface to https... But what happens when I go to online bank and that uses https traffic?? 1. Should we change the web interface to some absurd port number? Only web admin of pfsense needs that. 2. It sounds like the Squid or no Squid, this solution proposed by you should work... Anil Garg +1 408-221-7725 From: Daniel Davis daniel.da...@lasseters.com.au To: support@pfsense.com support@pfsense.com Sent: Tue, October 5, 2010 3:54:39 PM Subject: RE: [pfSense Support] Proxy Question Yes, just put a DNS entry in the DNS forwarder for proxy.sucks.com pointing to your gateway IP address. You will also need to change the proxy port to port 80 (make sure that the pfsense web interface is set to HTTPS in advanced settings first). Regards, Daniel Davis From:Anil Garg [mailto:garg_art2...@yahoo.com] Sent: Wednesday, 6 October 2010 4:28 AM To: support@pfsense.com Subject: [pfSense Support] Proxy Question At my work, I have to enter:proxy.sucks.com:80 under the ToolsOptionsnetworkconnectionssettings When I get home, I have to invariably retrace my path. I have a vanilla pfsense 1.2.3 set up with no proxy or anything.. in the following way: LAN |--pfsense---DSLrouter---ISP is there a way for domain name proxy.sucks.com:80 to point to squid on pfsense? If so one can venture and install squid as a package for fun. Anil Garg +1 408-221-7725 -- This message has been scanned for viruses and dangerous content by mail.lasseters.com.au, and no infections were found.
Re: [pfSense Support] DDNS updates not working
On Wed, Oct 6, 2010 at 4:44 PM, RB aoz@gmail.com wrote: On Wed, Oct 6, 2010 at 08:31, Chris Buechler cbuech...@gmail.com wrote: So far as I can tell, the cron job for updating the DDNS entries isn't being run. There isn't one that updates your IP. That's kicked off from which ever process renews your WAN IP, which depends on what kind of WAN it is. What kind of WAN is it? Curious - there's a cron job set for 01:01 that runs /etc/rc.dyndns.update, which seems to be calling the right functions. Not as often as I'd thought at first glance, but enough for my purposes. Its only function is to update if your IP has not changed and it's been long enough that it needs to be updated to keep your account from going inactive. Not sure how that interacts with the new functionality to check your actual public IP, may just need to increase its frequency. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Siproxd
On Wed, Oct 6, 2010 at 4:46 AM, belkhiria aymen belkhiria.ay...@gmail.com wrote: Hi, I need to configure siproxd as Sip proxy for external users. I don't think siproxd is designed for this, nor is it necessary. db - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
[pfSense Support] CAPWAP support?
Has anybody investigated making a CAPWAP plugin ? Would it even work, or does each vendor require a load of proprietary bits to make it useful? Regards, -Jeppe - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] DDNS updates not working
On Wed, Oct 6, 2010 at 08:31, Chris Buechler cbuech...@gmail.com wrote: There isn't one that updates your IP. That's kicked off from which ever process renews your WAN IP, which depends on what kind of WAN it is. What kind of WAN is it? Just switched over to bridged mode on the modem and am doing PPPoE directly from the WAN interface (all simple defaults save user/pw). Verified the IP was correct, then unplugged the phone side of the modem to simulate a WAN failure, waited several seconds until pfSense identified it as down, then plugged back in. The pfSense box correctly identified it as offline, but once it brought itself back online, DDNS didn't update and hasn't for 60 minutes. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
RE: [pfSense Support] Proxy Question
Anil, This won't affect HTTPS traffic as it will still be proxied over port 80 (just remember, if Squid is listening on port 80, it is not necessarily for HTTP traffic only, it is just the port that the proxy is listening on. Squid can also proxy other types of traffic over the same port e.g. HTTPS, FTP, SOCKS) . You just need to make sure the web interface is not on port 80 so that the proxy service can bind to that port (only one service can be listening on a specific port at any one time). 1. You can do this, the only reason you would 'need' to is if you need another service to listen on port 443. Some people do this as a 'security' measure but I'm not a believer in security by obscurity. 2. This will only work with some kind of proxy running on your network at the proxy.sucks.com:80 address. If there is no proxy available (and it is set in your web browser) you will just get timeout messages for all your HTTP requests. Regards, Daniel Davis From: Anil Garg [mailto:garg_art2...@yahoo.com] Sent: Thursday, 7 October 2010 12:57 AM To: support@pfsense.com Subject: Re: [pfSense Support] Proxy Question Thanks Dan. Appreciate it. I suppose the trick is in web interface to https... But what happens when I go to online bank and that uses https traffic?? 1. Should we change the web interface to some absurd port number? Only web admin of pfsense needs that. 2. It sounds like the Squid or no Squid, this solution proposed by you should work... Anil Garg +1 408-221-7725 From: Daniel Davis daniel.da...@lasseters.com.au To: support@pfsense.com support@pfsense.com Sent: Tue, October 5, 2010 3:54:39 PM Subject: RE: [pfSense Support] Proxy Question Yes, just put a DNS entry in the DNS forwarder for proxy.sucks.comhttp://proxy.sucks.com pointing to your gateway IP address. You will also need to change the proxy port to port 80 (make sure that the pfsense web interface is set to HTTPS in advanced settings first). Regards, Daniel Davis From: Anil Garg [mailto:garg_art2...@yahoo.com] Sent: Wednesday, 6 October 2010 4:28 AM To: support@pfsense.com Subject: [pfSense Support] Proxy Question At my work, I have to enter:proxy.sucks.com:80 under the ToolsOptionsnetworkconnectionssettings When I get home, I have to invariably retrace my path. I have a vanilla pfsense 1.2.3 set up with no proxy or anything.. in the following way: LAN |--pfsense---DSLrouter---ISP is there a way for domain name proxy.sucks.com:80 to point to squid on pfsense? If so one can venture and install squid as a package for fun. Anil Garg +1 408-221-7725 -- This message has been scanned for viruses and dangerous content by MailScanner has detected a possible fraud attempt from spamalot.lasseters.com claiming to be mail.lasseters.com.auhttp://spamalot.lasseters.com/, and no infections were found. -- This message has been scanned for viruses and dangerous content by mail.lasseters.com.au, and no infections were found.
Re: [pfSense Support] How do I break down a /22 into smaller subnetsto use behind(LAN) side of my pfsense box
Test from BB. Sent on the TELUS Mobility network with BlackBerry -Original Message- From: Beat Siegenthaler bsi...@gmail.com Date: Wed, 06 Oct 2010 09:34:02 To: support@pfsense.com Reply-To: support@pfsense.com Subject: Re: [pfSense Support] How do I break down a /22 into smaller subnets to use behind(LAN) side of my pfsense box On 05.10.10 20:43, Adam Thompson wrote: (On an unrelated note - anyone know why I can't send emails to this list from my BlackBerry? Works for other mailman-managed lists elsewhere...) As I remember this is not mailman. It is ezmlm. And I cannot send mails from my regular account too. Because we do SRS and ezmlm is not aware of this. Maybe Your BB sends SRS or BATV envelopes.. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
RE: [pfSense Support] How do I break down a /22 into smaller subnetsto use behind(LAN) side of my pfsense box
Recived loud and clear -Original Message- From: evg.yu...@rogers.com [mailto:evg.yu...@rogers.com] Sent: Thursday, 7 October 2010 3:45 PM To: support@pfsense.com Subject: Re: [pfSense Support] How do I break down a /22 into smaller subnetsto use behind(LAN) side of my pfsense box Test from BB. Sent on the TELUS Mobility network with BlackBerry -Original Message- From: Beat Siegenthaler bsi...@gmail.com Date: Wed, 06 Oct 2010 09:34:02 To: support@pfsense.com Reply-To: support@pfsense.com Subject: Re: [pfSense Support] How do I break down a /22 into smaller subnets to use behind(LAN) side of my pfsense box On 05.10.10 20:43, Adam Thompson wrote: (On an unrelated note - anyone know why I can't send emails to this list from my BlackBerry? Works for other mailman-managed lists elsewhere...) As I remember this is not mailman. It is ezmlm. And I cannot send mails from my regular account too. Because we do SRS and ezmlm is not aware of this. Maybe Your BB sends SRS or BATV envelopes.. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
[pfSense Support] BlackBerry and pfSense Support list
*changing subject* The only problem I have sending from bb is that the only way to send a message is top-posting which is not welcomed here... Sent on the TELUS Mobility network with BlackBerry -Original Message- From: Waisiki Ravula waisiki.rav...@itc.gov.fj Date: Thu, 7 Oct 2010 16:04:52 To: support@pfsense.com Reply-To: support@pfsense.com Subject: RE: [pfSense Support] How do I break down a /22 into smaller subnetsto use behind(LAN) side of my pfsense box Recived loud and clear -Original Message- From: evg.yu...@rogers.com [mailto:evg.yu...@rogers.com] Sent: Thursday, 7 October 2010 3:45 PM To: support@pfsense.com Subject: Re: [pfSense Support] How do I break down a /22 into smaller subnetsto use behind(LAN) side of my pfsense box Test from BB. Sent on the TELUS Mobility network with BlackBerry -Original Message- From: Beat Siegenthaler bsi...@gmail.com Date: Wed, 06 Oct 2010 09:34:02 To: support@pfsense.com Reply-To: support@pfsense.com Subject: Re: [pfSense Support] How do I break down a /22 into smaller subnets to use behind(LAN) side of my pfsense box On 05.10.10 20:43, Adam Thompson wrote: (On an unrelated note - anyone know why I can't send emails to this list from my BlackBerry? Works for other mailman-managed lists elsewhere...) As I remember this is not mailman. It is ezmlm. And I cannot send mails from my regular account too. Because we do SRS and ezmlm is not aware of this. Maybe Your BB sends SRS or BATV envelopes.. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
