Re: [pfSense] 2.3-REL, HA, WAN CARP IPv6 MAC seen as active on both NICs

2016-05-02 Thread Olivier Mascia
> Le 2 mai 2016 à 20:24, Olivier Mascia a écrit : > > I have a problem with IPv6 on a HA setup. > > With IPv4, it is OK. > >> IPv4 : >> VLAN MAC Address TypeAge Port >> Mod >> -+-+---+-+-

Re: [pfSense] 2.3-REL, HA, WAN CARP IPv6 MAC seen as active on both NICs

2016-05-02 Thread Olivier Mascia
Sorry, top-posting this time. Capturing on WAN(x:y:z:d8ff::2/64), link-local = fe80::250:56ff:febf:7014 (is MASTER), I can see: 00:15:27.653423 IP6 (hlim 255, next-header VRRP (112) payload length: 36) fe80::250:56ff:febf:7014 > ff02::12: ip-proto-112 36 00:15:28.663409 IP6 (hlim 255, next-head

[pfSense] 2.3-REL /diag_packet_capture.php - bug or misleading behavior

2016-05-02 Thread Olivier Mascia
The /diag_packet_capture.php allows to set Address Family to IPv6 Only and further Protocol to CARP. In such case it captures nothing (or rather filters out too much). To actually see the ip-proto-112 packets to ff02::12, one has to set Protocol to Any. -- Meilleures salutations, Met vriendel

Re: [pfSense] problems captive portal after upgrade from 2.2.6 to 2.3

2016-05-02 Thread NABEEL HASAN
Same problem with me, even refreshing on mobile devices does not do any good. I revert back to 2.2.6 From: List on behalf of daniel soto Sent: Monday, April 18, 2016 4:21 PM To: list@lists.pfsense.org Subject: [pfSense] problems captive portal after upg

Re: [pfSense] [Bulk] Strange problem with HAProxy failing after WAN IP changes

2016-05-02 Thread PiBa
Hi, Afaik, haproxy does not and did not reload on a wan-ip change on either pfSense version. There are a few options though. -make haproxy frontend listen on 'any' -or use a portforward to forward incoming traffic to 127.0.0.1 , haproxy could then be listening on localhost:80. Regards, PiBa-NL

[pfSense] 2.3-REL, HA, WAN CARP IPv6 MAC seen as active on both NICs

2016-05-02 Thread Olivier Mascia
I have a problem with IPv6 on a HA setup. With IPv4, it is OK. > IPv4 : > VLAN MAC Address TypeAge Port > Mod > -+-+---+-+--+--- > 2776 .5e00.0168dynamic 0 Veth5

Re: [pfSense] Site to Site VPN behind nat

2016-05-02 Thread Karl Fife
On 5/2/2016 10:24 AM, Vick Khera wrote: On Sun, May 1, 2016 at 8:18 PM, Dane Reugger wrote: I've seen this done with Aruba but not sure it's possible with PfSense but if it is I would love a guide to get it going. Use OpenVPN. It doesn't care at all about the NAT. Many guides online for se

Re: [pfSense] 2.3_1 ?

2016-05-02 Thread Olivier Mascia
> Le 2 mai 2016 à 16:19, Jason Hellenthal a écrit : > > Signé partie PGP > _1 would not be a development release. That would be a patch or an addendum > which I would assume handles the ntp security flaw patched in recent FreeBSD > security release. > > https://www.freebsd.org/security/adviso

Re: [pfSense] Site to Site VPN behind nat

2016-05-02 Thread Vick Khera
On Sun, May 1, 2016 at 8:18 PM, Dane Reugger wrote: > I've seen this done with Aruba but not sure it's possible with PfSense but > if it is I would love a guide to get it going. > Use OpenVPN. It doesn't care at all about the NAT. Many guides online for setting up whole network VPN over OpenVPN.

Re: [pfSense] USB3 to ethernet adaptor

2016-05-02 Thread Nenhum_de_Nos
On Mon, 2 May 2016 07:57:55 -0600 WebDawg wrote: > On May 2, 2016 1:56 AM, "Frans Meulenbroeks" > wrote: > > > > Hi, > > > > Has anyone experience using USB3 to ethernet adapters ? I need an extra > > interface but my HW (Intel NUC) does not have room for another card). > > Anything recommendabl

Re: [pfSense] 2.3_1 ?

2016-05-02 Thread Jason Hellenthal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 _1 would not be a development release. That would be a patch or an addendum which I would assume handles the ntp security flaw patched in recent FreeBSD security release. https://www.freebsd.org/security/advisories/FreeBSD-SA-16:16.ntp.asc On May

[pfSense] SSO WMI

2016-05-02 Thread Gustavo Freitas
Hi, I am looking for information about WMI SSO and how can I implement in pfsense .. Someone could get some help and more information, I believe that would be an ideal solution to implement without using packages such as Samba. I am willing to contribute to this project -- Gustavo Freitas

Re: [pfSense] USB3 to ethernet adaptor

2016-05-02 Thread WebDawg
On May 2, 2016 1:56 AM, "Frans Meulenbroeks" wrote: > > Hi, > > Has anyone experience using USB3 to ethernet adapters ? I need an extra > interface but my HW (Intel NUC) does not have room for another card). > Anything recommendable? > > Best regards, Frans. > _

[pfSense] V2.3 & Letsencrypt

2016-05-02 Thread Willem Visscher
Hi List, Did anyone experienced any success with using LetsEncrypt certificates (and automatic ACME installation) on Pfsense V2.3 already ? In case of yes, would there be a good write-up available to get me started ? KR, Kamaradski ___ pfSense mailin

[pfSense] 2.3_1 ?

2016-05-02 Thread Olivier Mascia
The update check on 2.3-REL GUI offers me 2.3_1, yet I don't see mention of it on pfsense.org. Could it be that my system polls for dev branch releases and not only released builds? Or that the auto-update only revealed the beast before the blog on pfsense.org? -- Meilleures salutations, Met vr

[pfSense] Strange problem with HAProxy failing after WAN IP changes

2016-05-02 Thread Dominique Kaspar
Hi, we have a strange problem on our PFSense since we migrated to 2.3. We use the HAProxy package to enable external access to several of our webservices (webmail, taiga, wiki, kimai, owncloud) running on VMs in our LAN. In order to do that, we have configured several frontends as well as sever

Re: [pfSense] USB3 to ethernet adaptor

2016-05-02 Thread Adam Thompson
On 16-05-02 06:20 AM, Rafael Aquino wrote: De: "Frans Meulenbroeks" Has anyone experience using USB3 to ethernet adapters ? I need an extra interface but my HW (Intel NUC) does not have room for another card). Anything recommendable? Best regards, Frans. Hi there, I´ve tried once an USB Multi-

Re: [pfSense] USB3 to ethernet adaptor

2016-05-02 Thread Rafael Aquino
- Mensagem original - > De: "Frans Meulenbroeks" > Para: list@lists.pfsense.org > Enviadas: Segunda-feira, 2 de maio de 2016 4:56:49 > Assunto: [pfSense] USB3 to ethernet adaptor > Hi, > > Has anyone experience using USB3 to ethernet adapters ? I need an extra > interface but my HW (Int

Re: [pfSense] pfsense: first experience/first problem

2016-05-02 Thread Cheyenne Deal
You can turn off dhcp6 on the interfaces page On Mon, May 2, 2016, 02:55 Frans Meulenbroeks wrote: > Hi, > > Last weekend I started with pfsense and during that I immediately > encountered an issue that I would like to report here (assuming this is the > right place to do so). > > What happened

[pfSense] USB3 to ethernet adaptor

2016-05-02 Thread Frans Meulenbroeks
Hi, Has anyone experience using USB3 to ethernet adapters ? I need an extra interface but my HW (Intel NUC) does not have room for another card). Anything recommendable? Best regards, Frans. ___ pfSense mailing list https://lists.pfsense.org/mailman/lis

[pfSense] pfsense: first experience/first problem

2016-05-02 Thread Frans Meulenbroeks
Hi, Last weekend I started with pfsense and during that I immediately encountered an issue that I would like to report here (assuming this is the right place to do so). What happened was that after installing the WAN port got an IPv4 address over DHCP but kept on spawning DHCPv6 requests at a rat