Re: [pfSense] using Pfsense as a router

2014-05-14 Thread Giles Coochey
On 14/05/2014 06:27, Faisal Gillani wrote: Kluas I apologize for this , yes this was a typo error. Local Network information is as below. Local Network IP settings and how can we use (OSPF / BGP) ? Site 1 IP 172.16.0.0 Subnet 255.255.255.0 All clients in Site 1 use 172.16.1.16 (Linux

[pfSense] pfsense 2.1.3 and IPv6 problem

2014-05-14 Thread R.Sv.
Dear all Started to play around with IPv6 with my Swiss provider (VTX, not yet officially supporting IPv6) and HE.net IPv6 Tunnel. IPv6 works, but not correctly, some web pages do not load at all or never end to finish loading. I guess because some routing problem. Looking at ifconfig I

Re: [pfSense] pfsense 2.1.3 and IPv6 problem

2014-05-14 Thread R. Svejda
Hi Chris generally full agreement with your suggestion, but that's not my problem. Same IPv6 setup works well with the very same computer in 2nd network environment, only difference is only the WAN link on the 2nd pfsense. In my case, I assume that: - client sends to IPv6 gateway on

Re: [pfSense] Recommendations for Analyzing Firewall logs

2014-05-14 Thread Jan Tichý
This is bugging me too. Jan 14. 5. 2014 v 21:45, Robert Guerra rgue...@privaterra.org: I’m curious what, if any, packages or tools folks on this list might be using to analyze Pfsense firewall logs. My interest is to , if possible, have the firewall logs sent to a Remote Syslog

Re: [pfSense] Recommendations for Analyzing Firewall logs

2014-05-14 Thread RB
rsyslog + elasticsearch + kibana On Wed, May 14, 2014 at 8:22 AM, Jan Tichý ja...@me.com wrote: This is bugging me too. Jan 14. 5. 2014 v 21:45, Robert Guerra rgue...@privaterra.org: I’m curious what, if any, packages or tools folks on this list might be using to analyze Pfsense

Re: [pfSense] pfsense 2.1.3 and IPv6 problem

2014-05-14 Thread Chris L
On May 14, 2014, at 2:51 AM, R. Svejda r...@balsec.com wrote: Hi Chris generally full agreement with your suggestion, but that's not my problem. Same IPv6 setup works well with the very same computer in 2nd network environment, only difference is only the WAN link on the 2nd pfsense.

Re: [pfSense] My son is able to bypass my captivate portal

2014-05-14 Thread Ryan Rodrigue
You can set a nat forward on dns port to force all dns request to go to a specific address. FirewallNAT Interface LAN (or your internal interface you wish to use) Protocol TCP/UDP Destination: Any Destination Port Range: 53 Redirect Target IP: Where you want it to go, Perhaps OpenDNS address.

Re: [pfSense] Recommendations for Analyzing Firewall logs

2014-05-14 Thread Travis Hansen
Do you have some good grok patterns for indexing pfsense data? I started some a while back for this exact setup but gave up. On Wednesday, May 14, 2014 8:37 AM, RB aoz@gmail.com wrote: rsyslog + elasticsearch + kibana On Wed, May 14, 2014 at 8:22 AM, Jan Tichý ja...@me.com wrote:

Re: [pfSense] using Pfsense as a router

2014-05-14 Thread Karl Fife
The two ends of your MPLS link are on different subnets, so your MPLS provider will have to route for you. You have to coordinate with them on that (OR create your own point-to-point tunnel) For example, YOUR site1 router needs to know that site2's 172.16.11.0/24 subnet is reachable via

Re: [pfSense] Recommendations for Analyzing Firewall logs

2014-05-14 Thread Jim Pingle
On 5/14/2014 2:16 PM, Travis Hansen wrote: Do you have some good grok patterns for indexing pfsense data? I started some a while back for this exact setup but gave up. Keep an eye on the logs for pfSense 2.2. We ditched the native pflog tcpdump style output and changed to a single line

Re: [pfSense] Recommendations for Analyzing Firewall logs

2014-05-14 Thread RB
On Wed, May 14, 2014 at 12:16 PM, Travis Hansen travisghan...@yahoo.com wrote: Do you have some good grok patterns for indexing pfsense data? I started some a while back for this exact setup but gave up. Unfortunately no, I had to move off of pfSense for non-pfSense reasons and haven't been

Re: [pfSense] Recommendations for Analyzing Firewall logs

2014-05-14 Thread Kurt Buff
Here's one I've been looking at: https://code.google.com/p/enterprise-log-search-and-archive/ On Wed, May 14, 2014 at 6:45 AM, Robert Guerra rgue...@privaterra.org wrote: I’m curious what, if any, packages or tools folks on this list might be using to analyze Pfsense firewall logs. My

Re: [pfSense] Recommendations for Analyzing Firewall logs

2014-05-14 Thread jason whitt
I like RB's reference. I will be looking into that as well. Currently im using Manage Engine's firewall analyzer product on some fortigate's at work. Note i haven't checked that out yet against pfsense, i'd prefer an open source solution anyway. On Wed, May 14, 2014 at 8:37 AM, RB

Re: [pfSense] Recommendations for Analyzing Firewall logs

2014-05-14 Thread Travis Hansen
Yes, the combination of LOGSTASH/ELASTICSEARCH/KIBANA has been a massive improvement for our datacenter.  We literally have *everything* (syslog/http/haproxy/vpn/etc/etc) getting dumped into it.  Being able to find the proverbial needle in the haystack for the past year with 0 effort has made

Re: [pfSense] Recommendations for Analyzing Firewall logs

2014-05-14 Thread Neil MacLauchlin
I'm using Graylog2, graylog2.org. Open source, good community. I'm running it mainly for log storage and searching. Definitely worth checking out, it's a great product. --- Original Message --- From: Robert Guerra rgue...@privaterra.org Sent: May 14, 2014 9:46 AM To: pfSense Support and