[pfSense Support] Need help

2007-05-18 Thread Marco Vinella
I need to have some information about configuring pfSense's proxy. We have a LAN Active Directory (W Server 2003) managed. We have to filtering internet (WAN), from LAN, access with pfSense's proxy. We want to authorize only Users which are in a specific Active Directory's group. We want to

Re: [pfSense Support] Need help

2007-05-18 Thread Gary Buckmaster
Marco Vinella wrote: I need to have some information about configuring pfSense's proxy. We have a LAN Active Directory (W Server 2003) managed. We have to filtering internet (WAN), from LAN, access with pfSense's proxy. We want to authorize only Users which are in a specific Active Directory's

Re: AW: [pfSense Support] Shaping OpenVPN Tunnels (Take two)

2007-05-18 Thread Mike Lee
Martin, Actually this is exactly what I want. I want to shape the entire OpenVPN tunnel entirely. This is because I will only be passing VoIP traffic within this tunnel. Therefore, if I want to run my VoIP OpenVPN tunnel over the standard port 1194 then I would like to shape all traffic on

[pfSense Support] VLAN Setup of pfSense ?'s

2007-05-18 Thread David Strout
Proof of concept - can this be done??? The customers scenario: They have a pfS box with four interfaces (fxp0-3) fxp0=WAN (static) fxp1=LAN (192.168.1.0/24) fxp2=DMZ (10.1.1.0/24) fxp3=WLAN (192.168.2.0/24) Everything works well and very reliably, but I have two new networks (VLAN'd w/ Cisco

AW: AW: AW: [pfSense Support] Shaping OpenVPN Tunnels (Take two)

2007-05-18 Thread Fuchs, Martin
In the latest snap 14-5 it's present... Von: Mike Lee [mailto:[EMAIL PROTECTED] Gesendet: Freitag, 18. Mai 2007 18:30 An: support@pfsense.com Betreff: Re: AW: AW: [pfSense Support] Shaping OpenVPN Tunnels (Take two) Are you talking about the most recent 1.2 beta snapshot? I am running

Re: [pfSense Support] VLAN Setup of pfSense ?'s

2007-05-18 Thread Bill Marquette
Once you create the vlan's, you'll go in and add another opt interface that will correspond to the vlan you added to the physical interface. I don't have a box in front of me to walk through the menu's, but the bottom line is that what you want to do is doable in pfSense and is all configured

Re: AW: AW: AW: [pfSense Support] Shaping OpenVPN Tunnels (Take two)

2007-05-18 Thread Scott Ullrich
The option resides in the OpenVPN server configuration screen. Scott On 5/18/07, Mike Lee [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've upgraded my embedded client to 1.2-BETA-1-TESTING-SNAPSHOT-05-14-2007 and I still don't see the option to shape the

Re: AW: AW: AW: [pfSense Support] Shaping OpenVPN Tunnels (Take two)

2007-05-18 Thread Mike Lee
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've upgraded my embedded client to 1.2-BETA-1-TESTING-SNAPSHOT-05-14-2007 and I still don't see the option to shape the entire tunnel under the OpenVPN-Client screen. Am I looking in the wrong area. I also tried to create a new tunnel and no

Re: AW: AW: AW: [pfSense Support] Shaping OpenVPN Tunnels (Take two)

2007-05-18 Thread Mike Lee
Oh. I though you meant the client side. I'll upgrade our main pfSense box (server-side) and try again. Thanks and have a great weekend. Mike Scott Ullrich wrote: The option resides in the OpenVPN server configuration screen. Scott On 5/18/07, Mike Lee [EMAIL PROTECTED] wrote: I've

[pfSense Support] Captive Portal ?

2007-05-18 Thread David Strout
Now that I plowed through the VLAN issue. I have been presented with another config question. Is there any way to have captive portal active on multiple interfaces? I dug through the mail lists and the forum, but it seems that the answer is a resounding no. So naturally the next question is

Re: [pfSense Support] Captive Portal ?

2007-05-18 Thread Scott Ullrich
On 5/18/07, David Strout [EMAIL PROTECTED] wrote: Now that I plowed through the VLAN issue. I have been presented with another config question. Is there any way to have captive portal active on multiple interfaces? I dug through the mail lists and the forum, but it seems that the answer is a

Re: AW: AW: AW: [pfSense Support] Shaping OpenVPN Tunnels (Take two)

2007-05-18 Thread Mike Lee
Sorry guys, but when I looked at the OpenVPN server options on one of our OpenVPN boxes running the 5/14 snapshot, I don't see any options for shaping the tunnel. Below are the options I have: Disable this tunnel Protocol Dynamic IP Local port Address pool Use static IPs Local network Remote

AW: AW: AW: AW: [pfSense Support] Shaping OpenVPN Tunnels (Take two)

2007-05-18 Thread Fuchs, Martin
Shaping only works from client side at the moment... I'm looking how to shape from server side but at the monemt it's not possible... -Ursprüngliche Nachricht- Von: Mike Lee [mailto:[EMAIL PROTECTED] Gesendet: Freitag, 18. Mai 2007 22:48 An: support@pfsense.com Betreff: Re: AW: AW: AW:

Re: AW: AW: AW: AW: [pfSense Support] Shaping OpenVPN Tunnels (Take two)

2007-05-18 Thread Mike Lee
Ok. I'll just hold tight for now. Do you know if this functionality will make it into the final 1.2 release or will it be in future point (1.3, etc.) releases? Thanks. Mike Fuchs, Martin wrote: Shaping only works from client side at the moment... I'm looking how to shape from server side

[pfSense Support] 1.0.1 Load Balancing

2007-05-18 Thread Chris Flugstad
Im having a hard time getting this setup. I have the MultiWan/Load Balancing doc from PfSenseDocs, but it is slightly different. When I try to put in the info, i get The following input errors were detected: 192.168.10.99 is currently being referenced by an interface ip address on wan.

Re: [pfSense Support] 1.0.1 Load Balancing

2007-05-18 Thread Scott Ullrich
Update to a recent snapshot or 1.2-BETA-1. Scott PS: yes its stable. On 5/18/07, Chris Flugstad [EMAIL PROTECTED] wrote: Im having a hard time getting this setup. I have the MultiWan/Load Balancing doc from PfSenseDocs, but it is slightly different. When I try to put in the info, i get The

Re: [pfSense Support] 1.0.1 Load Balancing

2007-05-18 Thread Chris Flugstad
Much Easier, thanks Scott. Also, I did a test on 2 routers (ex 192's) and now I am going to take it onsite and use to Public IP's, but they have the same GW, as they are my dsl lines. I am the ISP. Will there be any complications since they both have the same gateway? Chris Scott Ullrich