Re: [pfSense Support] Beta1 to Beta3 upgrade

2006-04-23 Thread Anders D. Hansen

On Apr 20, 2006, at 18:12 , Scott Ullrich wrote:


I have Beta1 running on an embedded device and want to replace this
box with a server running Beta3.
Can I import the configuration from Beta1 and install this on the new
server running Beta3 without problems or do you recommed I start from
scrach?


Yes, should not be a problem to go this route.



Nice, it worked pretty well - all I had to do after the import was to  
remap the interfaces because they were no longer called sis0 and so on.
When I tested the new firewall the rules seemed to work both  
incoming, outgoing and between DMZ zones but the servers could not  
initiate traffic to the outside world.


I could trace the outgoing traffic but somehow they did not get a  
response back? I use 1:1 NAT  by the way...


What can I have been missing? Any ideas?

Thank you.

Regards,
Anders

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Beta1 to Beta3 upgrade

2006-04-23 Thread Bill Marquette
On 4/23/06, Anders D. Hansen [EMAIL PROTECTED] wrote:
 On Apr 20, 2006, at 18:12 , Scott Ullrich wrote:
 
  I have Beta1 running on an embedded device and want to replace this
  box with a server running Beta3.
  Can I import the configuration from Beta1 and install this on the new
  server running Beta3 without problems or do you recommed I start from
  scrach?
 
  Yes, should not be a problem to go this route.
 

 Nice, it worked pretty well - all I had to do after the import was to
 remap the interfaces because they were no longer called sis0 and so on.
 When I tested the new firewall the rules seemed to work both
 incoming, outgoing and between DMZ zones but the servers could not
 initiate traffic to the outside world.

 I could trace the outgoing traffic but somehow they did not get a
 response back? I use 1:1 NAT  by the way...

 What can I have been missing? Any ideas?

You have rules on the OPT interfaces?  By default we block everything
on all interfaces except for LAN.

--Bill

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Beta1 to Beta3 upgrade

2006-04-23 Thread Anders D. Hansen


Nice, it worked pretty well - all I had to do after the import was to
remap the interfaces because they were no longer called sis0 and  
so on.

When I tested the new firewall the rules seemed to work both
incoming, outgoing and between DMZ zones but the servers could not
initiate traffic to the outside world.

I could trace the outgoing traffic but somehow they did not get a
response back? I use 1:1 NAT  by the way...

What can I have been missing? Any ideas?


You have rules on the OPT interfaces?  By default we block everything
on all interfaces except for LAN.

--Bill



Yes, the rules from the old firewall migrated perfectly so I don't  
think it has anything to do with the rules. The weird thing is that  
everything works from the LAN but not from other DMZ zones even  
though packages are sent out from the WAN interface. It's like keep  
state is not working as it is supposed to.


I think I will try to debug some more on the problem.

Thanks anyway.

~Anders

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] Beta1 to Beta3 upgrade

2006-04-20 Thread Anders D. Hansen

Hi list,

I have Beta1 running on an embedded device and want to replace this  
box with a server running Beta3.
Can I import the configuration from Beta1 and install this on the new  
server running Beta3 without problems or do you recommed I start from  
scrach?


Thank you very much!

Regards,
~Anders

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] Beta1 to Beta3 upgrade

2006-04-20 Thread Scott Ullrich
On 4/20/06, Anders D. Hansen [EMAIL PROTECTED] wrote:
 Hi list,

 I have Beta1 running on an embedded device and want to replace this
 box with a server running Beta3.
 Can I import the configuration from Beta1 and install this on the new
 server running Beta3 without problems or do you recommed I start from
 scrach?

Yes, should not be a problem to go this route.

Scott

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]