[pfSense Support] Dynamic Rule
I have a user who sits outside of our Office network. I need to open up a port for them to access Filemaker Through. I want to eventually get a VPN setup, but he has a Mac and I am not certain of how well the VPN will work with X.4 right now. I don't really have time to get this setup. I thought I would see about opening the ports up for him. He is on a Dynamic DSL connection. He travels frequently. What is involved in setting up a script which can be run every minute which will check a dynDNS name and insert the correct IP # in to the rule I have setup for him to access this port through the firewall? I have this successfully working on a linux box with a hosts.allow script running and inserting the correct IP# so he can ssh into a server remotely. Thanks -- Heath Henderson -- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Dynamic Rule
why don't you just setup an ssh tunnel and give him psuedo vpn via that? On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: I have a user who sits outside of our Office network. I need to open up a port for them to access Filemaker Through. I want to eventually get a VPN setup, but he has a Mac and I am not certain of how well the VPN will work with X.4 right now. I don't really have time to get this setup. I thought I would see about opening the ports up for him. He is on a Dynamic DSL connection. He travels frequently. What is involved in setting up a script which can be run every minute which will check a dynDNS name and insert the correct IP # in to the rule I have setup for him to access this port through the firewall? I have this successfully working on a linux box with a hosts.allow script running and inserting the correct IP# so he can ssh into a server remotely. Thanks -- Heath Henderson -- - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Dynamic Rule
This sounds like a better route. I wondered though, I know SSH access is setup internally, but I assume I must create a rule to allow access to it from the outside? Can I setup access from another port than 22 on the external interface or in the SSH config file? A little new here to setting these types of rules up. Thanks In Advance. -- Heath Henderson [EMAIL PROTECTED] 1800 288 7750 -- > From: Rob Terhaar <[EMAIL PROTECTED]> > Reply-To: > Date: Mon, 18 Sep 2006 10:50:34 -0500 > To: > Subject: Re: [pfSense Support] Dynamic Rule > > why don't you just setup an ssh tunnel and give him psuedo vpn via that? > > On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: >> I have a user who sits outside of our Office network. I need to open up a >> port for them to access Filemaker Through. I want to eventually get a VPN >> setup, but he has a Mac and I am not certain of how well the VPN will work >> with X.4 right now. I don't really have time to get this setup. I thought >> I would see about opening the ports up for him. >> >> He is on a Dynamic DSL connection. He travels frequently. What is involved >> in setting up a script which can be run every minute which will check a >> dynDNS name and insert the correct IP # in to the rule I have setup for him >> to access this port through the firewall? >> >> I have this successfully working on a linux box with a hosts.allow script >> running and inserting the correct IP# so he can ssh into a server remotely. >> >> Thanks >> >> -- >> Heath Henderson >> -- >> >> >> - >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> >> > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Dynamic Rule
On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: I have a user who sits outside of our Office network. I need to open up a port for them to access Filemaker Through. I want to eventually get a VPN setup, but he has a Mac and I am not certain of how well the VPN will work with X.4 right now. I don't really have time to get this setup. I thought I would see about opening the ports up for him. He is on a Dynamic DSL connection. He travels frequently. What is involved in setting up a script which can be run every minute which will check a dynDNS name and insert the correct IP # in to the rule I have setup for him to access this port through the firewall? I have this successfully working on a linux box with a hosts.allow script running and inserting the correct IP# so he can ssh into a server remotely. Thanks -- Heath Henderson -- You could always try OpenVPN. I know of at least one person using pfSense using it with OSX. --Bill - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Dynamic Rule
Thanks, I am going to go the SSH route first. I will have access to setup VPN in about 2 months. I just don't have the time currently, and this person's system is in California and I am not. I haven't setup the ssh tunnel before, so if anyone has any pointers. I want to make this as secure as possible on my end. He only has to get into our Filemaker server so limited remote access is where I will be going. -- Heath Henderson [EMAIL PROTECTED] 1800 288 7750 -- > From: Bill Marquette <[EMAIL PROTECTED]> > Reply-To: > Date: Mon, 18 Sep 2006 11:40:02 -0500 > To: > Subject: Re: [pfSense Support] Dynamic Rule > > On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: >> I have a user who sits outside of our Office network. I need to open up a >> port for them to access Filemaker Through. I want to eventually get a VPN >> setup, but he has a Mac and I am not certain of how well the VPN will work >> with X.4 right now. I don't really have time to get this setup. I thought >> I would see about opening the ports up for him. >> >> He is on a Dynamic DSL connection. He travels frequently. What is involved >> in setting up a script which can be run every minute which will check a >> dynDNS name and insert the correct IP # in to the rule I have setup for him >> to access this port through the firewall? >> >> I have this successfully working on a linux box with a hosts.allow script >> running and inserting the correct IP# so he can ssh into a server remotely. >> >> Thanks >> >> -- >> Heath Henderson >> -- > > You could always try OpenVPN. I know of at least one person using > pfSense using it with OSX. > > --Bill > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Dynamic Rule
On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: Thanks, I am going to go the SSH route first. I will have access to setup VPN in about 2 months. I just don't have the time currently, and this person's system is in California and I am not. I haven't setup the ssh tunnel before, so if anyone has any pointers. I want to make this as secure as possible on my end. He only has to get into our Filemaker server so limited remote access is where I will be going. Hence the suggestion to use OpenVPN. It's a simple setup on the pfSense side and I don't think on the OSX side it get's much easier than using the OSX client at http://www.tunnelblick.net/ --Bill - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Dynamic Rule
PPTP has some issues with OS X 10.4 now, but OpenVPN works great on the Mac using the latest Tunnelblick client, 3.0 rc 3 (http://www.tunnelblick.net/). Nate On 9/18/06, Bill Marquette <[EMAIL PROTECTED]> wrote: On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote:> I have a user who sits outside of our Office network. I need to open up a> port for them to access Filemaker Through. I want to eventually get a VPN > setup, but he has a Mac and I am not certain of how well the VPN will work> with X.4 right now. I don't really have time to get this setup. I thought> I would see about opening the ports up for him. >> He is on a Dynamic DSL connection. He travels frequently. What is involved> in setting up a script which can be run every minute which will check a> dynDNS name and insert the correct IP # in to the rule I have setup for him > to access this port through the firewall?>> I have this successfully working on a linux box with a hosts.allow script> running and inserting the correct IP# so he can ssh into a server remotely. >> Thanks>> --> Heath Henderson> --You could always try OpenVPN. I know of at least one person usingpfSense using it with OSX.--Bill- To unsubscribe, e-mail: [EMAIL PROTECTED]For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] Dynamic Rule
you can easily do an external port# to internal port# remap when you're setting up the port forwarding for the new SSH rule in pfsense. the process is fairly self explanatory. (i think?) On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: Thanks, I am going to go the SSH route first. I will have access to setup VPN in about 2 months. I just don't have the time currently, and this person's system is in California and I am not. I haven't setup the ssh tunnel before, so if anyone has any pointers. I want to make this as secure as possible on my end. He only has to get into our Filemaker server so limited remote access is where I will be going. -- Heath Henderson [EMAIL PROTECTED] 1800 288 7750 -- > From: Bill Marquette <[EMAIL PROTECTED]> > Reply-To: > Date: Mon, 18 Sep 2006 11:40:02 -0500 > To: > Subject: Re: [pfSense Support] Dynamic Rule > > On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: >> I have a user who sits outside of our Office network. I need to open up a >> port for them to access Filemaker Through. I want to eventually get a VPN >> setup, but he has a Mac and I am not certain of how well the VPN will work >> with X.4 right now. I don't really have time to get this setup. I thought >> I would see about opening the ports up for him. >> >> He is on a Dynamic DSL connection. He travels frequently. What is involved >> in setting up a script which can be run every minute which will check a >> dynDNS name and insert the correct IP # in to the rule I have setup for him >> to access this port through the firewall? >> >> I have this successfully working on a linux box with a hosts.allow script >> running and inserting the correct IP# so he can ssh into a server remotely. >> >> Thanks >> >> -- >> Heath Henderson >> -- > > You could always try OpenVPN. I know of at least one person using > pfSense using it with OSX. > > --Bill > > - > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
