[pfSense] help

2013-04-09 Thread eyobe kebede
hello there; it have been around three years since my institution started using pfsense as router. and it was so awesome and help full in my understanding since I used it for averagely enough time. but my problem starts now. in previous we were using static IP address that was given to us from Et

[pfSense] Help

2013-05-16 Thread Joy
Hi Team, Is it possible to use cloud based web filtering with pfsense like open dns based filtering. in case yes what software does that like websense etc ? ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listi

[pfSense] HELP

2014-07-09 Thread G.T.RAO
Greetings all, I ma new to pfsense , pl help me out "pfsense firewall & Nat configuration" for small education network. I am Using pfsense 2.1.4-reease for (i386) 1. interface on WAN (wan) -> em0 - > v4/DHCP4 : 192.168.0.16/24

Re: [pfSense] help

2013-04-09 Thread Luis Carrion
Hello, You should ask your ISP and have them to verify the Gateway. If you are using now 197.156.75.54 they should provide you with a Gateway inside the subnet your IP address is (depending on your subnet mask) Regards, Luis 2013/4/9 eyobe kebede > hello there; > > it have been around three

Re: [pfSense] help

2013-04-09 Thread Vick Khera
On Tue, Apr 9, 2013 at 3:49 AM, eyobe kebede wrote: > to 197.156.75.54 and default gateway of 10.130.42.65 As Luis points out, this makes no sense. What is the netmask they told you to use for the WAN address? The gateway must be within that network block defined by the netmask and IP.

Re: [pfSense] help

2013-04-09 Thread Jim Pingle
On 4/9/2013 11:06 AM, Vick Khera wrote: > > On Tue, Apr 9, 2013 at 3:49 AM, eyobe kebede > wrote: > > to 197.156.75.54 and default gateway of 10.130.42.65 > > > As Luis points out, this makes no sense. What is the netmask they told > you to use for the WAN address?

Re: [pfSense] help

2013-04-09 Thread Vick Khera
On Tue, Apr 9, 2013 at 11:19 AM, Jim Pingle wrote: > His ISP may have just forgotten to give him the proper gateway. But on > the outside chance they really do expect him to use that 10.x address as > the gateway, it may still be possible. > > http://redmine.pfsense.org/issues/972 > > Not support

Re: [pfSense] help

2013-04-16 Thread eyobe kebede
hi here I have got some information in our router configuration. the ip address is 10.134.192.154 and the subnet mask is 255.255.255.252. how could I configure this to include 197.156.75.54 as public IP On Tue, Apr 9, 2013 at 6:37 PM, Vick Khera wrote: > > On Tue, Apr 9, 2013 at 11:19 AM, Jim Pi

Re: [pfSense] help

2013-04-16 Thread Vick Khera
On Tue, Apr 16, 2013 at 4:53 AM, eyobe kebede wrote: > hi here I have got some information in our router configuration. the ip > address is 10.134.192.154 and the subnet mask is 255.255.255.252. how could > I configure this to include 197.156.75.54 as public IP > The network defined by that IP a

Re: [pfSense] help

2013-04-20 Thread eyobe kebede
197.156.75.54 is the rout able ip that they are routing as but 10.134.192.154 is the WAN ip and 10.130.42.65 is default gate way On Tue, Apr 16, 2013 at 4:32 PM, Vick Khera wrote: > > On Tue, Apr 16, 2013 at 4:53 AM, eyobe kebede wrote: > >> hi here I have got some information in our router co

Re: [pfSense] help

2013-04-23 Thread Vick Khera
On Sat, Apr 20, 2013 at 5:46 AM, eyobe kebede wrote: > but 10.134.192.154 is the WAN ip and 10.130.42.65 is default gate way Given that 10.134.192.154 is your WAN IP, and the netmask they gave you is 255.255.255.252, the *ONLY* other IP you can directly reach is 10.134.192.153. Your network add

Re: [pfSense] help

2013-04-24 Thread Matthias May
On 24/04/13 03:17, Vick Khera wrote: On Sat, Apr 20, 2013 at 5:46 AM, eyobe kebede > wrote: but 10.134.192.154 is the WAN ip and 10.130.42.65 is default gate way Given that 10.134.192.154 is your WAN IP, and the netmask they gave you is 255.255.255.252, the *ONLY

Re: [pfSense] help

2013-04-24 Thread eyobe kebede
after along period of communication they give us new WAN ip 10.130.51.83 and and public ip of 197.156.75.54 how we can configure all the two ip addresses? On Tue, Apr 23, 2013 at 6:17 PM, Vick Khera wrote: > > On Sat, Apr 20, 2013 at 5:46 AM, eyobe kebede wrote: > >> but 10.134.192.154 is the

Re: [pfSense] help

2013-04-24 Thread eyobe kebede
after along period of communication they give us new WAN ip 10.130.51.83 and and public ip of 197.156.75.54 how can I include the two ip addresses? On Wed, Apr 24, 2013 at 4:17 AM, Vick Khera wrote: > > On Sat, Apr 20, 2013 at 5:46 AM, eyobe kebede wrote: > >> but 10.134.192.154 is the WAN ip

Re: [pfSense] help

2013-04-24 Thread Chris Bagnall
On 24/4/13 1:28 pm, eyobe kebede wrote: after along period of communication they give us new WAN ip 10.130.51.83 and and public ip of 197.156.75.54 how can I include the two ip addresses? Is it just me or is this a *really* weird way of doing things? It's almost as if your provider is doing so

Re: [pfSense] help

2013-04-24 Thread Ryan Rodrigue
I am just a big dummy that is coming in late in the game. Is it possible that they are sending that IP to a router/modem and the router is doing nat. If so, is it possible to diable the routing functions and just use this as a bridge and not a router. I have seen this before with DSL and some cab

Re: [pfSense] help

2013-04-24 Thread eyobe kebede
we are using dSL and let me give you some information. we were using 10.130.48.72 IP address give by the ISP and for some reason we have purchased public ip 197.156.75.54. where technicians from the ISP do not give us how to use the IP addresses and it become difficult to configure it on pfsense.

Re: [pfSense] help

2013-04-24 Thread Ryan Rodrigue
Please don't top post. It makes helping difficult. From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On Behalf Of eyobe kebede Sent: Wednesday, April 24, 2013 9:36 AM To: pfSense support and discussion Subject: Re: [pfSense] help we are using dSL and l

Re: [pfSense] help

2013-04-24 Thread Matthias May
On 24/04/13 16:36, eyobe kebede wrote: we are using dSL and let me give you some information. we were using 10.130.48.72 IP address give by the ISP and for some reason we have purchased public ip 197.156.75.54. where technicians from the ISP do not give us how to use the IP addresses and it be

Re: [pfSense] help

2013-04-24 Thread Ryan Rodrigue
From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On Behalf Of Matthias May Sent: Wednesday, April 24, 2013 11:02 AM To: list@lists.pfsense.org Subject: Re: [pfSense] help On 24/04/13 16:36, eyobe kebede wrote: we are using dSL and let me give you some

Re: [pfSense] help

2013-04-24 Thread Chris Bagnall
Some ISPs that are particularly stingy with IPs and bad at routing have been doing this. I might be missing something, but it does seem like a pretty awful, and at best very temporary 'solution' to IPv4 shortage. I must admit if I were the OP, I'd probably be looking for a new DSL provider.

Re: [pfSense] help

2013-04-24 Thread Seth Mos
On 24-4-2013 18:24, Chris Bagnall wrote: >> Some ISPs that are particularly stingy with IPs and bad at routing have >> been doing this. > > I might be missing something, but it does seem like a pretty awful, and > at best very temporary 'solution' to IPv4 shortage. > > I must admit if I were the

Re: [pfSense] help

2013-04-25 Thread eyobe kebede
9:36 AM > *To:* pfSense support and discussion > *Subject:* Re: [pfSense] help > > ** ** > > we are using dSL and let me give you some information. we were using > 10.130.48.72 IP address give by the ISP and for some reason we have > purchased public ip 197.156.75.54.

Re: [pfSense] help

2013-04-28 Thread Vick Khera
On Wed, Apr 24, 2013 at 10:36 AM, eyobe kebede wrote: > public ip 197.156.75.54 our side and 197.156.75.53 ISP side > Well, now you have just shared some new information. Try this: set your public IP to 197.156.75.54 and the default route to the .53 address, and the netmask to 255.255.255.252.

Re: [pfSense] Help

2013-05-16 Thread Eugen Leitl
On Thu, May 16, 2013 at 04:25:10PM +0530, Joy wrote: > Hi Team, > Is it possible to use cloud based web filtering with pfsense > like open dns based filtering. > > in case yes what software does that like websense etc ? Have you tried just putting in OpenDNS resolvers under System->

Re: [pfSense] Help

2013-05-17 Thread Bill Randall
--- On Thu, 5/16/13, Joy wrote: From: Joy Subject: [pfSense] Help To: "pfSense support and discussion" Date: Thursday, May 16, 2013, 5:55 AM Hi Team,              Is it possible to use cloud based web filtering with pfsense like open dns based filtering.  in case yes what software

Re: [pfSense] HELP

2014-07-09 Thread A Mohan Rao
At present u can only block with transparent proxy http sites whatever u want like social networks movies downloading etc with groupwise. If u want to block https sites u can use non-transparent proxy.. Thnx MOHAN RAO On Jul 9, 2014 4:26 PM, "G.T.RAO" wrote: > Greetings all, > I ma new to pfse

Re: [pfSense] HELP

2014-07-09 Thread G.T.RAO
hi, can u help me regarding non-transparent proxy. Sent with MailTrack On Wed, Jul 9, 2014 at 4:31 PM, A Mohan Rao wrote: > At present u can only block with transparent proxy http sites what

Re: [pfSense] HELP

2014-07-09 Thread A Mohan Rao
you can give team viewer tomorrow.. On Wed, Jul 9, 2014 at 4:38 PM, G.T.RAO wrote: > hi, can u help me regarding non-transparent proxy. > > > > Sent with MailTrack > > > > On Wed, Jul 9, 2014

Re: [pfSense] HELP

2014-07-09 Thread G.T.RAO
hi, tomorrow i am free from 11 am to 3 pm. Sent with MailTrack On Wed, Jul 9, 2014 at 4:40 PM, A Mohan Rao wrote: > you can give team viewer tomorrow.. > > > > On Wed, Jul 9, 2014 at 4:38 P

Re: [pfSense] HELP

2014-07-10 Thread G.T.RAO
Hi, Mr Mohan Rao , no new update from ur end. Sent with MailTrack On Wed, Jul 9, 2014 at 4:40 PM, A Mohan Rao wrote: > you can give team viewer tomorrow.. > > > > On Wed, Jul 9, 2014 at 4:38

Re: [pfSense] HELP

2014-07-10 Thread Ryan Coleman
Please take this conversation off list. -- Ryan Coleman ryanjc...@me.com m. 651.373.5015 o. 612.568.2749 > On Jul 10, 2014, at 7:44, "G.T.RAO" wrote: > > Hi, Mr Mohan Rao , no new update from ur end. > > > > Sent with MailTrack > > > >> On Wed, Jul 9, 2014 at 4:40 PM, A Mohan Rao wrote:

Re: [pfSense] HELP

2014-07-10 Thread Tim Nelson
- Original Message - > Greetings all, > I ma new to pfsense , pl help me out "pfsense firewall & Nat > configuration" for small education network. > I am Using pfsense 2.1.4-reease for (i386) > 1. interface on WAN (wan) -> em0 - > v4/DHCP4 : 192.168.0.16/24 > 2. interface on LAN (lan

Re: [pfSense] HELP

2014-07-10 Thread A Mohan Rao
Hello mr rao, Its your work so i will not availble with your conditions and timings. better is u can take time frim me then we will shortout ur problems.. Thanks On Jul 10, 2014 6:14 PM, "G.T.RAO" wrote: > Hi, Mr Mohan Rao , no new update from ur end. > > > > Sent with MailTrack >

Re: [pfSense] HELP

2014-07-10 Thread Ryan Coleman
PLEASE take this conversation off the list. -- Ryan Coleman ryanjc...@me.com m. 651.373.5015 o. 612.568.2749 > On Jul 10, 2014, at 9:15, A Mohan Rao wrote: > > Hello mr rao, > Its your work so i will not availble with your conditions and timings. > better is u can take time frim me then we

Re: [pfSense] HELP

2014-07-10 Thread A Mohan Rao
Okey...! On Jul 10, 2014 7:46 PM, "Ryan Coleman" wrote: > PLEASE take this conversation off the list. > > -- > Ryan Coleman > ryanjc...@me.com > m. 651.373.5015 > o. 612.568.2749 > > On Jul 10, 2014, at 9:15, A Mohan Rao wrote: > > Hello mr rao, > Its your work so i will not availble with your c

Re: [pfSense] HELP

2014-07-10 Thread Roberto Tufik
G.T.RAO writes: > > Greetings all, > I ma new to pfsense , pl help me out  "pfsense firewall & Nat configuration" for small education network. > >  I am Using  pfsense 2.1.4-reease for (i386) > > > > 1. interface  on WAN (wan) -> em0  - >  v4/DHCP4 : 192.168.0.16/24 > > > 2. interface  on

[pfSense] Help on reports

2016-08-30 Thread Abhi
Hi All, I have been trying to configure it to send mail's as to daily reports & usage details. It's able to send me test msg's. But, i am not getting the daily reports. Is there a particular way to set it -- Thanks & Regards, Abhishek Purba +919845153700

[pfSense] Help with VLAN setup

2013-11-23 Thread Benjamin Swatek
Hello all… I’m trying to set up VLANs but I can’t get it to work. I have a TP-Link TL-SL2210WEB switch connected to a pfSense box. The switch should connect to 3 ADSL Modems on ports 2, 3 and 4 and to the pfSense Box on port 1. On the switch I configured port 2 to be part of VLAN 2, port 3 to

[pfSense] Help - GW Failover Gateway

2013-11-25 Thread Pedro Almeida
Hi, I need of information about GW Failover Gateway. I tested many times and don't worked. I'm using Openvpn interface option. When the link wan primary down the change is not realized for the link wan secundary. I have to change manually for the link secundary. Can someone help me in this ca

[pfSense] Help with configuration of pfSense

2011-09-16 Thread Jelmer Baas
Hello everyone, I have been struggling with the pfSense configuration for a while now, but haven't be able to create a working solution. We would like to use a pfSense firewall to protect our internet-accessible IP range, say 82.94.x.y. I want to be able to define rules about who can access w

[pfSense] pfSense help with creating rules

2012-02-08 Thread Jason T. Slack-Moehrle
Hello All, I build a box dedicated to pfSense, 3 NICS. WAN, LAN, what I thought would be a DMZ for my hosting. WAN works. LAN Works as I can plug directly into that card, get an IP and get out to where ever. I am having trouble with DMZ as I thought it would be as simple as going from DMZ ->

Re: [pfSense] Help with VLAN setup

2013-11-23 Thread Adam Thompson
On Sat 23 Nov 2013 10:40:23 AM CST, Benjamin Swatek wrote: I’m trying to set up VLANs but I can’t get it to work. I have a TP-Link TL-SL2210WEB switch connected to a pfSense box. The switch should connect to 3 ADSL Modems on ports 2, 3 and 4 and to the pfSense Box on port 1. On the switch I conf

Re: [pfSense] Help with VLAN setup

2013-11-23 Thread Benjamin Swatek
On 23, Nov2013, at 13:14 , Adam Thompson wrote: >> What am I doing wrong? > > My best guess is untagged/tagged confusion on your part, but there are other > possibilities. > > I assume VLAN 1 is your "LAN", i.e. the subnet protected by the firewall. > Presumably ports 5 through 8 are on VLA

[pfSense] Help with OpenVPN interface rules

2014-10-13 Thread Paul Beriswill
Help!! I'm trying to get per interface OpenVPN rules working and have run into a problem: I go into the Interfaces->(assign) menu and create an interface assignment (OPENVPN_OPS). Now, when I create rules for the OpenVPN_Ops interface, using 'OPEN_VPN_OPS net' as 'Source' the rule never hits.

Re: [pfSense] Help with configuration of pfSense

2011-09-16 Thread Seth Mos
On 16-9-2011 13:53, Jelmer Baas wrote: Hello everyone, We would like to use a pfSense firewall to protect our internet-accessible IP range, say 82.94.x.y. I want to be able to define rules about who can access what port and what server (i.e., most of our current machines should be reached o

Re: [pfSense] Help with configuration of pfSense

2011-09-16 Thread Jelmer Baas
eth Mos > Sent: vrijdag 16 september 2011 14:14 > To: pfSense support and discussion > Subject: Re: [pfSense] Help with configuration of pfSense > > On 16-9-2011 13:53, Jelmer Baas wrote: > > Hello everyone, > > > We would like to use a pfSense firewall to protect our inte

Re: [pfSense] Help with configuration of pfSense

2011-09-16 Thread Christoph Hanle
alf Of Seth Mos >> Sent: vrijdag 16 september 2011 14:14 >> To: pfSense support and discussion >> Subject: Re: [pfSense] Help with configuration of pfSense >> >> On 16-9-2011 13:53, Jelmer Baas wrote: >>> Hello everyone, >> >>> We would like to

Re: [pfSense] pfSense help with creating rules

2012-02-08 Thread David Burgess
On Wed, Feb 8, 2012 at 10:28 AM, Jason T. Slack-Moehrle wrote: > > I am having trouble with DMZ as I thought it would be as simple as going from > DMZ -> SWITCH -> MY SERVERS WITH PUBLIC IP'S > Do you have advanced outbound NAT enabled? You will need it. It will auto-create rules for LAN and DMZ

Re: [pfSense] pfSense help with creating rules

2012-02-08 Thread Jason T. Slack-Moehrle
Hi David, > > I am having trouble with DMZ as I thought it would be as simple as going > > from DMZ -> SWITCH -> MY SERVERS WITH PUBLIC IP'S > > > Do you have advanced outbound NAT enabled? You will need it. It will > auto-create rules for LAN and DMZ, just delete the ones for the DMZ to > allow

Re: [pfSense] pfSense help with creating rules

2012-02-08 Thread David Burgess
On Wed, Feb 8, 2012 at 5:07 PM, Jason T. Slack-Moehrle wrote: > > I do see that: 'Automatic outbound NAT rule generation' is indeed on. > Right, so your "public IPs" are getting NATed on their way through pfsense. Turn it off (ie, from automatic to advanced). db ___

Re: [pfSense] pfSense help with creating rules

2012-02-08 Thread Jason T. Slack-Moehrle
Hi David, >> I do see that: 'Automatic outbound NAT rule generation' is indeed on. > > Right, so your "public IPs" are getting NATed on their way through > pfsense. Turn it off (ie, from automatic to advanced). Indeed I have tried that as well. So then I would create a rule from from WAN to a sp

Re: [pfSense] pfSense help with creating rules

2012-02-08 Thread David Burgess
On Wed, Feb 8, 2012 at 5:13 PM, Jason T. Slack-Moehrle wrote: > So then I would create a rule from from WAN to a specific IP on the > DMZ for any 80? I have had that rule in place but I dont get the site > when I hit it. I think you're still talking about inbound NAT (aka, port forwards), which

Re: [pfSense] pfSense help with creating rules

2012-02-08 Thread Jason T. Slack-Moehrle
Hi David, >> So then I would create a rule from from WAN to a specific IP on the >> DMZ for any 80? I have had that rule in place but I dont get the site >> when I hit it. > > I think you're still talking about inbound NAT (aka, port forwards), > which you don't need. > > You need to turn on outbo

Re: [pfSense] pfSense help with creating rules

2012-02-08 Thread Nathan Eisenberg
> am I missing something obvious? Would I need to possible restart the > server itself or any switches? You're hitting the default deny rule on the DMZ interface. Rules on all interfaces are processed as 'inbound' to that interface - so return traffic from an HTTP request would be sourced from

Re: [pfSense] pfSense help with creating rules

2012-02-08 Thread Jason T. Slack-Moehrle
Hi Nathan, > am I missing something obvious? Would I need to possible restart the >> server itself or any switches? > > You're hitting the default deny rule on the DMZ interface.  Rules on all > interfaces are processed as 'inbound' to that interface - so return traffic > from an HTTP request wo

Re: [pfSense] pfSense help with creating rules

2012-02-09 Thread Ugo Bellavance
On 2012-02-08 22:32, Jason T. Slack-Moehrle wrote: Hi Nathan, am I missing something obvious? Would I need to possible restart the server itself or any switches? You're hitting the default deny rule on the DMZ interface. Rules on all interfaces are processed as 'inbound' to that interface

Re: [pfSense] pfSense help with creating rules

2012-02-09 Thread Jason T. Slack-Moehrle
Hi > > I restarted the pfSense box and noticed that when it rebooted it had: > > > > WAN (wan) --> em1 --> 75.xx.xx.28 > > LAN (lan) --> em3 --> 172.16.254.1 > > DMZ (opt1) --> em2 --> NONE > > > > That is correct, right, since my servers in 75.xx.xx.xx are on the > > DMZ? Do I have to do anythi

Re: [pfSense] pfSense help with creating rules

2012-02-09 Thread Nathan Eisenberg
> Well my WAN has one of my 5 public IP's. I have 75.xx.xx.25 - .29 with > a gateway of .30 > > So I have a few other public IP's on servers that I wanted on a DMZ. > Just port 80 actually. > > So I want traffic on port 80 coming in through WAN getting routed to > .27 which is on the DMZ. That wa

Re: [pfSense] pfSense help with creating rules

2012-02-09 Thread Adam Thompson
> > Well my WAN has one of my 5 public IP's. I have 75.xx.xx.25 - .29 > > with a gateway of .30 > > So I have a few other public IP's on servers that I wanted on a > > DMZ. Just port 80 actually. > > So I want traffic on port 80 coming in through WAN getting routed > > to .27 which is on the DMZ.

Re: [pfSense] pfSense help with creating rules

2012-02-09 Thread Jason T. Slack-Moehrle
> The alternative is, as Nathan mentioned, bridging, wherein you either set > up two firewalls (one in transparent mode, one in NAT mode), or a very > complex setup on a single firewall. > > Note that doing anything other than "right" solution (routing it properly) > will increase the amount of hor

Re: [pfSense] pfSense help with creating rules

2012-02-09 Thread Jason T. Slack-Moehrle
On Thu, Feb 9, 2012 at 1:24 PM, Nathan Eisenberg wrote: >> Well my WAN has one of my 5 public IP's. I have 75.xx.xx.25 - .29 with >> a gateway of .30 >> >> So I have a few other public IP's on servers that I wanted on a DMZ. >> Just port 80 actually. >> >> So I want traffic on port 80 coming in th

Re: [pfSense] pfSense help with creating rules

2012-02-09 Thread Adam Thompson
> OK, so I called Comcast and explained exactly the above about the > /29 routed to a /30 and the representative was clueless, so I asked > them to open up a ticket and escalate to a tier 2 tech. We shall see > what they say. > > This obviously means that they will create a new block of public > IP

Re: [pfSense] pfSense help with creating rules

2012-02-09 Thread Nathan Eisenberg
> Every inter-router link must have at least two IP addresses, one for > each > router. The smallest possible subnet in IPv4-over-ethernet that can > contain two addresses is a /30. Well, if you want to get technical, the minimum possible subnet in IPv4 over Ethernet is actually a /31. $employe

Re: [pfSense] pfSense help with creating rules

2012-02-09 Thread Adam Thompson
> Well, if you want to get technical, the minimum possible subnet in > IPv4 over Ethernet is actually a /31. $employer uses these > religiously in PtP Ethernet links, and they work flawlessly. > Unfortunately, *BSD doesn't seem to implement RFC3021, which is > really a pity, because it means all m

Re: [pfSense] pfSense help with creating rules

2012-02-09 Thread Nathan Eisenberg
> I think the entire ISP operation I partly run has... three routers that > support > it, AFAIK. So for all practical intents and purposes, that doesn't exist for > me. > > It would be nice, most definitely, if it were supported by more equipment, > but it's just not (in my corner of the world,

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Warren Baker
On Fri, Feb 10, 2012 at 6:34 AM, Nathan Eisenberg wrote: > > Well, if you want to get technical, the minimum possible subnet in IPv4 over > Ethernet is actually a /31.  $employer uses these religiously in PtP Ethernet > links, and they work flawlessly.  Unfortunately, *BSD doesn't seem to > imp

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Gordon Russell
- Original Message - > From: "Nathan Eisenberg" > To: athom...@athompso.net, "pfSense support and discussion" > > Sent: Friday, February 10, 2012 2:56:36 AM > Subject: Re: [pfSense] pfSense help with creating rules > > I think the entire ISP op

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Ryan Rodrigue
- Original Message - > From: "Nathan Eisenberg" > To: athom...@athompso.net, "pfSense support and discussion" > > Sent: Friday, February 10, 2012 2:56:36 AM > Subject: Re: [pfSense] pfSense help with creating rules > > I think the entire ISP op

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Jason T. Slack-Moehrle
Hi Nathan, > Anyways, didn't mean to hijack the OP! Interested to see if Comcast is > actually handing him a /29, or just 5 IPs out of a bigger subnet, and if > they'll route that /29 to him. I am a little confused at how I would know if they are handing me a /29 or just 5 IP's? range: 75.xx.x

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Vick Khera
On Fri, Feb 10, 2012 at 11:00 AM, Jason T. Slack-Moehrle wrote: > I am a little confused at how I would know if they are handing me a /29 or > just 5 IP's? > > range: 75.xx.xx.25 - .29 > subnet: 255.255.255.248 (which is /29, IIRC) > GW: 75.xx.xx.30 Comcast has routed that /29 to your cable mode

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Jason T. Slack-Moehrle
Hi, > On Fri, Feb 10, 2012 at 11:00 AM, Jason T. Slack-Moehrle > mailto:slackmoeh...@gmail.com)> wrote: > > I am a little confused at how I would know if they are handing me a /29 or > > just 5 IP's? > > > > range: 75.xx.xx.25 - .29 > > subnet: 255.255.255.248 (which is /29, IIRC) > > GW: 75.xx.

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Adrian Wenzel
- Original Message - > From: "Jason T. Slack-Moehrle" > > Hi, > > On Fri, Feb 10, 2012 at 11:00 AM, Jason T. Slack-Moehrle > > mailto:slackmoeh...@gmail.com)> wrote: > > > I am a little confused at how I would know if they are handing me > > > a /29 or just 5 IP's? > > > > > > range: 75

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Ryan Rodrigue
From: list-boun...@lists.pfsense.org [mailto:list-boun...@lists.pfsense.org] On Behalf Of Jason T. Slack-Moehrle Sent: Friday, February 10, 2012 10:00 AM To: pfSense support and discussion Subject: Re: [pfSense] pfSense help with creating rules Hi Nathan, > Anyways, didn't

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Jason T. Slack-Moehrle
Hi Ryan, > I am a little confused at how I would know if they are handing me a /29 or > just 5 IP's? > > range: 75.xx.xx.25 - .29 > subnet: 255.255.255.248 (which is /29, IIRC) > GW: 75.xx.xx.30 > > Comcast is faster, but is not dedicated. You should always get the same > speeds (or reasona

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Adam Thompson
> Wait, are you saying I could just pay Comcast for 14 addresses and > create a routed subnet myself and not have them do it? > > Or could I just have them create for me a 2nd IP block of 1 IP, load > that on the modem with my block of 5 and somehow created a routed > subnet from the /31 to my /29

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Jason T. Slack-Moehrle
HI, > Wait, are you saying I could just pay Comcast for 14 addresses and create a > routed subnet myself and not have them do it? > > Or could I just have them create for me a 2nd IP block of 1 IP, load that on > the modem with my block of 5 and somehow created a routed subnet from the /31 > to

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Moshe Katz
On Fri, Feb 10, 2012 at 2:50 PM, Jason T. Slack-Moehrle < slackmoeh...@gmail.com> wrote: > HI, > > Wait, are you saying I could just pay Comcast for 14 addresses and > create a routed subnet myself and not have them do it? > > > > Or could I just have them create for me a 2nd IP block of 1 IP, loa

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Adam Thompson
> -Original Message- > From: list-boun...@lists.pfsense.org [mailto:list- > boun...@lists.pfsense.org] On Behalf Of Jason T. Slack-Moehrle > Sent: Friday, February 10, 2012 1:51 PM > To: pfSense support and discussion > Subject: Re: [pfSense] pfSense help with cre

Re: [pfSense] pfSense help with creating rules

2012-02-10 Thread Jason T. Slack-Moehrle
HI Adam, > Or, in short: yes, just go with what Comcast wants you to do. You can > create a separate DMZ if you want to keep the servers off your LAN, if > necessary. It's not usually necessary unless you're running a public > website. (Which, BTW, might violate your Comcast Terms of Service -

[pfSense] pfSense help at Dayton NJ needed

2014-04-11 Thread Christoph Hanle
Hi all, sorry for my "abuse" of the mailing list. We have the disaster of a broken pfSense upgrade to 2.1.2. Unfortunally we don't have a proper technican on site all repair attemps by phone have been not successfull and the (planned) new pfSense HA-cluster will not reach our location before Tuesda

Re: [pfSense] Help with OpenVPN interface rules

2014-10-14 Thread Jim Pingle
On 10/13/2014 10:46 AM, Paul Beriswill wrote: > Now, when I create rules for the OpenVPN_Ops interface, using > 'OPEN_VPN_OPS net' as 'Source' the rule never hits. > It doesn't appear > that the 'net' and 'address' aliases are being populated when the > connection is established. Is this correct?

Re: [pfSense] Help with OpenVPN interface rules

2014-10-14 Thread Paul Beriswill
Jim Thanks for the response. That is what I suspected, that the values were populated at config time rather than connect time. The main reason that I wanted to be able to use those values is because I couldn't find a way to use an alias when defining a 'Client Specific Override'. I wanted to

[pfSense] Help with Dup-To in pfSense

2015-02-20 Thread Manojav Sridhar
Hi all This is my first post to the list. I should preface that I have searched the dup-to topic on the forums and haven't found any good explanations as to how to do it in pfSense. I used to run a tomato based router at home. it reached its limits as my link speed exceed it, instead of getting a

[pfSense] Help with provider assigning multiple IP addresses over PPPoE

2015-11-14 Thread C. R. Oldham
Greetings, My ISP provides access over PPPoE and has given me 2 static IPs via the following configuration (public IPs sanitized) Subnet Report -- Subnet Size:4 Usable IP addresses:xxx.yyy.149.218 Gateway address:

Re: [pfSense] Help with provider assigning multiple IP addresses over PPPoE

2015-11-15 Thread Chris Bagnall
On 14 Nov 2015, at 20:19, C. R. Oldham wrote: > My ISP provides access over PPPoE and has given me 2 static IPs via the > following configuration (public IPs sanitized) > Usable IP addresses:xxx.yyy.149.218 > Gateway address:xxx.yyy.149.217 > Subnet mask:255.255.255.252 >

Re: [pfSense] Help with provider assigning multiple IP addresses over PPPoE

2015-11-15 Thread ys1338
message From: "C. R. Oldham" Date: 11/14/2015 3:19 PM (GMT-05:00) To: pfSense Support and Discussion Mailing List Subject: [pfSense] Help with provider assigning multiple IP addresses over PPPoE Greetings, My ISP provides access over PPPoE and has given me 2 static I

Re: [pfSense] Help with provider assigning multiple IP addresses over PPPoE

2015-11-15 Thread Steve Yates
> I don't have any trouble adding NAT > rules that forward the .217 through to my internal network.  If that works, it sounds like .217 is your IP, and not your gateway as they documented. What is the gateway on your WAN connection? -- Steve Yates ITS, Inc. __

Re: [pfSense] Help with provider assigning multiple IP addresses over PPPoE

2015-11-25 Thread C. R. Oldham
On Sat, Nov 14, 2015 at 9:14 PM, Chris Bagnall wrote: > On 14 Nov 2015, at 20:19, C. R. Oldham wrote: > > My ISP provides access over PPPoE and has given me 2 static IPs via the > [...] > > I cannot figure out how to make pfSense expose the xxx.yyy.149.218 > address [...] The ‘easiest’ way of

[pfSense] Help in Configuring my pfsense 2.0 firewall for IPSec tunneling with a Cisco router ASA5505

2012-07-10 Thread Joseph Rotan
Hi, I'm configuring my pfsense 2.0 firewall to do tunneling with a remote Cisco Router ASA5505 and with the provided *VPN Device Host Information, **Encryption Method (**Phase 1 Properties and **Phase 2 Properties), **Encryption Domain and **Pre-Shared-Key information from my remote site I'am not

Re: [pfSense] Help in Configuring my pfsense 2.0 firewall for IPSec tunneling with a Cisco router ASA5505

2012-07-11 Thread Ian Bowers
What information precisely are you missing? -Ian Pro VPN Monkey On Tue, Jul 10, 2012 at 10:59 PM, Joseph Rotan wrote: > Hi, > > I'm configuring my pfsense 2.0 firewall to do tunneling with a remote > Cisco Router ASA5505 and with the provided *VPN Device Host Information, * > *Encryption Method

Re: [pfSense] Help in Configuring my pfsense 2.0 firewall for IPSec tunneling with a Cisco router ASA5505

2012-07-11 Thread Ian Bowers
What information precisely are you missing? Or unsure on? Apologies, it's not completely clear from your email -Ian Pro VPN Monkey On Tue, Jul 10, 2012 at 10:59 PM, Joseph Rotan wrote: > Hi, > > I'm configuring my pfsense 2.0 firewall to do tunneling with a remote > Cisco Router ASA5505 and wi

Re: [pfSense] Help in Configuring my pfsense 2.0 firewall for IPSec tunneling with a Cisco router ASA5505

2012-10-10 Thread Neil
Did you get it working. I need to do the same and can't get the phase 1 connection to work. N ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list