Re: [pfSense] NPt and IPsec on pfSense

2016-05-12 Thread Olivier Mascia
> Le 12 mai 2016 à 11:11, Olivier Mascia a écrit : > > Assuming two sites having to use NPt to map IPv6 IP Alias from WAN to > fd00::/64 like on the LAN. > > For instance: > > Site A: a:b:c:1000::1/56 is the WAN IPv6. And a:b:c:1001::1/64 (IP Alias on > WAN) match with fd01::1/64 on LAN thro

Re: [pfSense] Limiters on LAN, WAN

2016-05-12 Thread WebDawg
I think you would have a solution with placing an overall limiter on the the wan side with the dest as the public ip. I do not do 1:1 nat but this would be my first guess. Since you use NAT and private ips that could be handled by LAN rules I would think. On Thu, May 12, 2016 at 2:46 PM, Steve Y

Re: [pfSense] Limiters on LAN, WAN

2016-05-12 Thread Steve Yates
No we're actually using NAT and private IPs inside the building. We use 1:1 NAT if a tenant needs a public IP. -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:list-boun...@lists.pfsense.org] On Behalf Of WebDawg Sent: Thursday, May 12, 2016 2:38 PM To: pfSense Support an

Re: [pfSense] Limiters on LAN, WAN

2016-05-12 Thread WebDawg
On Thu, May 12, 2016 at 1:42 PM, Steve Yates wrote: > To explain my need it's for limiting traffic for several tenants of > an office building, so each gets up to "n" amount of bandwidth. Each has a > static IP and their own router. > > Maybe I was just overthinking it. Having

Re: [pfSense] Limiters on LAN, WAN

2016-05-12 Thread Steve Yates
To explain my need it's for limiting traffic for several tenants of an office building, so each gets up to "n" amount of bandwidth. Each has a static IP and their own router. Maybe I was just overthinking it. Having a limiter on the WAN side would therefore limit the connectio

Re: [pfSense] Limiters on LAN, WAN

2016-05-12 Thread WebDawg
On Thu, May 12, 2016 at 1:11 PM, Steve Yates wrote: > I have the limiters configured as you show. But are you saying you would > normally set your limiter on rules on both the LAN and WAN? Basically, I > should set it on LAN for now and when the bug is fixed set it on WAN also? > > -- > > Stev

Re: [pfSense] Limiters on LAN, WAN

2016-05-12 Thread Steve Yates
I have the limiters configured as you show. But are you saying you would normally set your limiter on rules on both the LAN and WAN? Basically, I should set it on LAN for now and when the bug is fixed set it on WAN also? -- Steve Yates ITS, Inc. -Original Message- From: List [mailto:

Re: [pfSense] Limiters on LAN, WAN

2016-05-12 Thread WebDawg
On Thu, May 12, 2016 at 11:52 AM, Steve Yates wrote: > A question on where to set up a limiter...if it is set on a LAN rule > and has in/out limiters set, will the limiter only apply to outbound traffic > matching the rule (from __ to any)? Or would that match, say, the response > to a

[pfSense] Limiters on LAN, WAN

2016-05-12 Thread Steve Yates
A question on where to set up a limiter...if it is set on a LAN rule and has in/out limiters set, will the limiter only apply to outbound traffic matching the rule (from __ to any)? Or would that match, say, the response to an outbound HTTP request? Up until now I've only had occasion

Re: [pfSense] Port mapping like reverse proxy

2016-05-12 Thread FrancisM
Thank you Ed & Dave for your comments maybe I will look into other FOSS application that can do this feature because I already have the OpenKVM and I want to give access to my friends and provision VM to them and the plan is each servers will use the default ports although they have different DNS e

[pfSense] NPt and IPsec on pfSense

2016-05-12 Thread Olivier Mascia
Hello, Assuming two sites having to use NPt to map IPv6 IP Alias from WAN to fd00::/64 like on the LAN. For instance: Site A: a:b:c:1000::1/56 is the WAN IPv6. And a:b:c:1001::1/64 (IP Alias on WAN) match with fd01::1/64 on LAN through NPt. Site B: w:x:y:1000::1/56 is the WAN IPv6. And w:x:y