I need to have some information about configuring pfSense's proxy.
We have a LAN Active Directory (W Server 2003) managed. We have to filtering
internet (WAN), from LAN, access with pfSense's proxy.
We want to authorize only Users which are in a specific Active Directory's
group.
We want to
Marco Vinella wrote:
I need to have some information about configuring pfSense's proxy.
We have a LAN Active Directory (W Server 2003) managed. We have to filtering
internet (WAN), from LAN, access with pfSense's proxy.
We want to authorize only Users which are in a specific Active Directory's
Martin,
Actually this is exactly what I want. I want to shape the entire
OpenVPN tunnel entirely. This is because I will only be passing VoIP
traffic within this tunnel. Therefore, if I want to run my VoIP OpenVPN
tunnel over the standard port 1194 then I would like to shape all
traffic on
Proof of concept - can this be done???
The customers scenario:
They have a pfS box with four interfaces (fxp0-3)
fxp0=WAN (static)
fxp1=LAN (192.168.1.0/24)
fxp2=DMZ (10.1.1.0/24)
fxp3=WLAN (192.168.2.0/24)
Everything works well and very reliably, but I
have two new networks (VLAN'd w/ Cisco
In the latest snap 14-5 it's present...
Von: Mike Lee [mailto:[EMAIL PROTECTED]
Gesendet: Freitag, 18. Mai 2007 18:30
An: support@pfsense.com
Betreff: Re: AW: AW: [pfSense Support] Shaping OpenVPN Tunnels (Take two)
Are you talking about the most recent 1.2 beta snapshot? I am running
Once you create the vlan's, you'll go in and add another opt interface
that will correspond to the vlan you added to the physical interface.
I don't have a box in front of me to walk through the menu's, but the
bottom line is that what you want to do is doable in pfSense and is
all configured
The option resides in the OpenVPN server configuration screen.
Scott
On 5/18/07, Mike Lee [EMAIL PROTECTED] wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I've upgraded my embedded client to
1.2-BETA-1-TESTING-SNAPSHOT-05-14-2007 and I still don't
see the
option to shape the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I've upgraded my embedded client to
1.2-BETA-1-TESTING-SNAPSHOT-05-14-2007 and I still don't see the
option to shape the entire tunnel under the OpenVPN-Client screen. Am
I looking in the wrong area. I also tried to create a new tunnel and
no
Oh. I though you meant the client side. I'll upgrade our main pfSense
box (server-side) and try again. Thanks and have a great weekend.
Mike
Scott Ullrich wrote:
The option resides in the OpenVPN server configuration screen.
Scott
On 5/18/07, Mike Lee [EMAIL PROTECTED] wrote:
I've
Now that I plowed through the VLAN issue. I have
been presented with another config question.
Is there any way to have captive portal active on
multiple interfaces?
I dug through the mail lists and the forum, but it
seems that the answer is a resounding no. So
naturally the next question is
On 5/18/07, David Strout [EMAIL PROTECTED] wrote:
Now that I plowed through the VLAN issue. I have
been presented with another config question.
Is there any way to have captive portal active on
multiple interfaces?
I dug through the mail lists and the forum, but it
seems that the answer is a
Sorry guys, but when I looked at the OpenVPN server options on one of
our OpenVPN boxes running the 5/14 snapshot, I don't see any options for
shaping the tunnel. Below are the options I have:
Disable this tunnel
Protocol
Dynamic IP
Local port
Address pool
Use static IPs
Local network
Remote
Shaping only works from client side at the moment...
I'm looking how to shape from server side but at the monemt it's not possible...
-Ursprüngliche Nachricht-
Von: Mike Lee [mailto:[EMAIL PROTECTED]
Gesendet: Freitag, 18. Mai 2007 22:48
An: support@pfsense.com
Betreff: Re: AW: AW: AW:
Ok. I'll just hold tight for now. Do you know if this functionality
will make it into the final 1.2 release or will it be in future point
(1.3, etc.) releases? Thanks.
Mike
Fuchs, Martin wrote:
Shaping only works from client side at the moment...
I'm looking how to shape from server side
Im having a hard time getting this setup. I have the MultiWan/Load
Balancing doc from PfSenseDocs, but it is slightly different. When I
try to put in the info, i get
The following input errors were detected:
192.168.10.99 is currently being referenced by an interface ip address
on wan.
Update to a recent snapshot or 1.2-BETA-1.
Scott
PS: yes its stable.
On 5/18/07, Chris Flugstad [EMAIL PROTECTED] wrote:
Im having a hard time getting this setup. I have the MultiWan/Load
Balancing doc from PfSenseDocs, but it is slightly different. When I
try to put in the info, i get
The
Much Easier, thanks Scott.
Also, I did a test on 2 routers (ex 192's) and now I am going to take it
onsite and use to Public IP's, but they have the same GW, as they are my
dsl lines. I am the ISP. Will there be any complications since they
both have the same gateway?
Chris
Scott Ullrich
17 matches
Mail list logo