Re: [pfSense Support] traffic shapper: status queues broken as of 9-7 snapshot?

2006-09-18 Thread Rob Terhaar
good decision on this note :) http://cvstrac.pfsense.com/chngview?cn=14347 I did a fresh reinstall/restore from a 9-18 iso and my traffic shaper is still busted. it's bummer that it did work in an earlier release though :( oh well, something to look forward to in 1.2 right? On 9/14/06, Rob Te

Re: [pfSense Support] Load balancer problem

2006-09-18 Thread Scott Ullrich
On 9/19/06, Catalin Epure <[EMAIL PROTECTED]> wrote: v.1 R.C.2 Catalin Please upgrade to http://www.pfsense.com/~sullrich/1.0-SNAPSHOT-09-18-06/ and see if this solves the problems. Thanks! - To unsubscribe, e-mail: [EMAIL

Re: [pfSense Support] Load balancer problem

2006-09-18 Thread Catalin Epure
Scott Ullrich wrote: On 9/19/06, Catalin Epure <[EMAIL PROTECTED]> wrote:  I have settled the load balancer section to use 2 isp connections.  For some reason the log looks like this:    Sep 19 03:10:13   slbd[297]: Service Balancer changed status, reloading fi

Re: [pfSense Support] Load balancer problem

2006-09-18 Thread Scott Ullrich
On 9/19/06, Catalin Epure <[EMAIL PROTECTED]> wrote: I have settled the load balancer section to use 2 isp connections. For some reason the log looks like this: Sep 19 03:10:13 slbd[297]: Service Balancer changed status, reloading filter policy Sep 19 03:10:13 slbd

[pfSense Support] Load balancer problem

2006-09-18 Thread Catalin Epure
I have settled the load balancer section to use 2 isp connections. For some reason the log looks like this: Sep 19 03:10:13 slbd[297]: Service Balancer changed status, reloading filter policy Sep 19 03:10:13 slbd[297]: ICMP poll succeeded for IP.IP.IP

Re: [pfSense Support] pfsense to netgear ipsec vpn [solved]

2006-09-18 Thread cmaurand
This email will look best in a monospaced font. changed to aggressive mode on both ends. Pfsense is version 2.3 Changed the netgear identifiers to pwmtest for the ike policy and pwm-office for the vpn policy. I deleted the vpn policy and re-created it. So here are final settings. Netgear: VPN

RE: [pfSense Support] pfsense to netgear ipsec vpn

2006-09-18 Thread Holger Bauer
Try to use aggressive mode on both ends. Also try to setup different identifiers (like combination of UFQDN and passkeyphrase. It looks to me that there is a problem with the identifier. Is one of the ends behind another NAT? Also what version are you running? Holger > -Original Message---

Re: [pfSense Support] Dynamic Rule

2006-09-18 Thread Rob Terhaar
you can easily do an external port# to internal port# remap when you're setting up the port forwarding for the new SSH rule in pfsense. the process is fairly self explanatory. (i think?) On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: Thanks, I am going to go the SSH route first. I w

Re: [pfSense Support] Dynamic Rule

2006-09-18 Thread Nathan Osborne
PPTP has some issues with OS X 10.4 now, but OpenVPN works great on the Mac using the latest Tunnelblick client, 3.0 rc 3 (http://www.tunnelblick.net/).  Nate On 9/18/06, Bill Marquette <[EMAIL PROTECTED]> wrote: On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote:> I have a user who sits outside

Re: [pfSense Support] Dynamic Rule

2006-09-18 Thread Bill Marquette
On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: Thanks, I am going to go the SSH route first. I will have access to setup VPN in about 2 months. I just don't have the time currently, and this person's system is in California and I am not. I haven't setup the ssh tunnel before, so if any

Re: [pfSense Support] Dynamic Rule

2006-09-18 Thread Heath Henderson
Thanks, I am going to go the SSH route first. I will have access to setup VPN in about 2 months. I just don't have the time currently, and this person's system is in California and I am not. I haven't setup the ssh tunnel before, so if anyone has any pointers. I want to make this as secure as p

Re: [pfSense Support] Dynamic Rule

2006-09-18 Thread Bill Marquette
On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: I have a user who sits outside of our Office network. I need to open up a port for them to access Filemaker Through. I want to eventually get a VPN setup, but he has a Mac and I am not certain of how well the VPN will work with X.4 right no

Re: [pfSense Support] Dynamic Rule

2006-09-18 Thread Heath Henderson
This sounds like a better route. I wondered though, I know SSH access is setup internally, but I assume I must create a rule to allow access to it from the outside? Can I setup access from another port than 22 on the external interface or in the SSH config file? A little new here to setting thes

Re: [pfSense Support] Dynamic Rule

2006-09-18 Thread Rob Terhaar
why don't you just setup an ssh tunnel and give him psuedo vpn via that? On 9/18/06, Heath Henderson <[EMAIL PROTECTED]> wrote: I have a user who sits outside of our Office network. I need to open up a port for them to access Filemaker Through. I want to eventually get a VPN setup, but he has

[pfSense Support] pfsense to netgear ipsec vpn

2006-09-18 Thread cmaurand
Hello, I'm a relative newbie to ipsec on pfsense. I'm trying to establish an ipsec vpn connection to a netgear FVS124G. I already have a connection going to a sonicwall and that runs fine. The configuration on the pfsense is remote ip address PSK = and they match Interface =

[pfSense Support] Dynamic Rule

2006-09-18 Thread Heath Henderson
I have a user who sits outside of our Office network. I need to open up a port for them to access Filemaker Through. I want to eventually get a VPN setup, but he has a Mac and I am not certain of how well the VPN will work with X.4 right now. I don't really have time to get this setup. I though

Re: [pfSense Support] 1.0 RC2

2006-09-18 Thread Bill Marquette
On 9/18/06, Volker Kuhlmann <[EMAIL PROTECTED]> wrote: I didn't yet test, but does the shaper wizzard now check the correct interfaces for SQF(?) capability? There was no code change there. SQF? --Bill - To unsubscribe, e-mai

RE: [pfSense Support] OPENVPN Interface

2006-09-18 Thread Holger Bauer
Please use one of themost recent snapshots and retest: http://pfsense.com/~sullrich/1.0-SNAPSHOT-09-14-06/ Holger > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Monday, September 18, 2006 5:55 AM > To: support@pfsense.com > Subject: [pfSense Support] OPE

Re: [pfSense Support] 1.0 RC2

2006-09-18 Thread Volker Kuhlmann
> It is my great pleasure to announce pfSense 1.0-RC2! Thanks Scott, it goes really well. Some small points: Something creates /root/.tcshrc (time stamp of about install time). This file contains one byte of white space, and its existance effectively disables /root/.cshrc, which has real content