Re: [pfSense Support] Possible to boot pfSense with WAN interface down?

2009-01-28 Thread Tortise
Hi Marty

There will be a boot file that you can append the ifconfig command to, to take 
the WAN down on reboot.  This file would need to be watched for change if 
upgrading, for example if using a later CF image.

With alternative network dial in access you may be able to trigger pfsense to 
boot of there is WOL capability built in the pfsense PC BIOS and LAN.

Have you also considered using a VPN in and keeping pfsense otherwise closed?

Kind regards
David



- Original Message - 
  From: Marty Nelson 
  To: support@pfsense.com 
  Sent: Wednesday, January 28, 2009 10:06 AM
  Subject: [pfSense Support] Possible to boot pfSense with WAN interface down?


  Greetings all.

   

  I have a customer who's putting in a DSL line for us to be able to better 
support them (we're currently dialing in).  In doing so, they are somewhat 
breaking their corporate rules.  Even with their current dial in setup, we have 
to call them and tell them to plug it in when we want access.

   

  Well now with the DSL line going in, even though I'm throwing pfSense in, 
they are now even more concerned with security.  What I was wondering was if it 
was possible to have pfSense start with the WAN interface down so that we could 
then call them - dial in - connect to pfSense and manually fire up the WAN 
interface.  As far as I can tell, I can issue an ifconfig fxp1 down command 
from the web interface (or by sshing in), but should the machine be rebooted 
the interface starts up automatically.

   

  Is what I'm looking for do-able?

   

  Thanks!  

   

  -Marty

   


Re: [pfSense Support] Possible to boot pfSense with WAN interface down?

2009-01-28 Thread Simon Cornelius P Umacob
On Thu, Jan 29, 2009 at 9:14 AM, Tortise tort...@paradise.net.nz wrote:
 Hi Marty

 There will be a boot file that you can append the ifconfig command to, to
 take the WAN down on reboot.

I think you can just do an ifconfig interface down at the bottom of
/etc/rc, although the interface would probably be brought up a few
seconds before it can be brought down.  For more control, check out
interfaces_configure() at /etc/inc/interfaces.inc. =)

Regards,

[ simon.cpu ]

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



[pfSense Support] Possible to boot pfSense with WAN interface down?

2009-01-27 Thread Marty Nelson
Greetings all.

I have a customer who's putting in a DSL line for us to be able to better 
support them (we're currently dialing in).  In doing so, they are somewhat 
breaking their corporate rules.  Even with their current dial in setup, we have 
to call them and tell them to plug it in when we want access.

Well now with the DSL line going in, even though I'm throwing pfSense in, they 
are now even more concerned with security.  What I was wondering was if it was 
possible to have pfSense start with the WAN interface down so that we could 
then call them - dial in - connect to pfSense and manually fire up the WAN 
interface.  As far as I can tell, I can issue an ifconfig fxp1 down command 
from the web interface (or by sshing in), but should the machine be rebooted 
the interface starts up automatically.

Is what I'm looking for do-able?

Thanks!

-Marty