[pfSense Support] carp and firewall setups

2007-11-13 Thread Geoff Crompton
Hi, I'm just trying to educate myself about carp, and if pfSense can do what we want. I'm trying out an 1.2RC3-embedded on a pair of net4801 devices. We have a several servers in a datacentre, and two subnets, a /28 and a /27. Our datacenter have said that they can give us an extra /30 for our WA

[pfSense Support] QOS over IPsec tunnels

2007-11-13 Thread Wade Blackwell
Good afternoon folks, So I have A Cisco 7960 (VOIP phone) network booting, pulling a TFTP config over an IPsec tunnel. The phone can make and recieve calls fine. At times when I pick up an inbound call the caller can't hear me right away, this did not happen when using the Cisco ASA so I beli

AW: [pfSense Support] Yanıt: AW: [pfSense Support] Squid Transpa rent Proxy port forwarding

2007-11-13 Thread Fuchs, Martin
Hmmm, perhaps you could define a rule above that permits the traffic for this excempt... Before the one that redirects the traffic tot he transparent proxy... Rules are executed from top down... Perhaps that could work... -Ursprüngliche Nachricht- Von: Alparslan Ozturk [mailto:[EMAIL PRO

[pfSense Support] binat rules

2007-11-13 Thread Alparslan Ozturk
Hi, when I check the binat rules on console like this command: pfctrl -sn I saw two rules entry for one binat rule. like this: rdr-anchor "miniupnpd" all binat on em0 inet from 192.168.111.84 to any -> 193.34.133.123 binat on em0 inet from 192.168.112.10 to any -> 193.34.133.125 binat on em

[pfSense Support] Yanıt: AW: [pfSense Support] Squid Transparent Proxy port forwarding

2007-11-13 Thread Alparslan Ozturk
Hi Martin, I did you suggestion.but I checked the rules on console the rules like this: rdr on em2 inet proto tcp from any to any port = http -> 193.34.133.75 port 8080 but I need exceptions for (LAN to DMZ) traffic:(!193.34.133.0/24) rdr on em2 inet proto tcp from any to !193.34.133.0/24 port

[pfSense Support] Can't get thru LogMeIn behind pfSense

2007-11-13 Thread Raleigh Guevarra
Hi there, Kindly help me out on how to set the firewall right to let LogMeIn connections thru... thank you in advance Be a better sports nut! Let your teams follow you with Yahoo Mobile. Try it now.

Re: [pfSense Support] Installing new NIC with unsupported drivers

2007-11-13 Thread Rahav Nathaniel
- Original Message From: RB <[EMAIL PROTECTED]> My question would be why you need GbE interfaces on your pfSense box - are you really going to be pushing more than 100Mbps? It's not impossible (quite to the contrary), but especially for WAN links even 10Mbps is often overkill. If you're

[pfSense Support] Yanıt: AW: [pfSense Support] Squid Transparent Proxy port forwarding

2007-11-13 Thread Alparslan Ozturk
Hi, my pfsense configuration like this: WAN-> em0 -> 193.34.132.2 OPT1(DMZ)-> em1 -> 193.34.132.65 LAN-> em2 -> 192.168.1.1 OPT2-> em3 -> 172.16.1.1 opt2 interface for management interface no connect lan or wan. do you have any suggestio

AW: [pfSense Support] Squid Transparent Proxy port forwarding

2007-11-13 Thread Fuchs, Martin
Try something like this... "Add a portforward at interface OPT2, external adress any (not interface adress), protocol TCP, external port range 80, NAT IP proxy at OPT6, local port 80. Save, apply. Oh, btw, if your proxy is not at port 80 you can use it like this: Add a portforward at interfac

[pfSense Support] Squid Transparent Proxy port forwarding

2007-11-13 Thread Alparslan Ozturk
Hi, I was trying to configure port forwarding rules like this: rdr on em2 inet proto tcp from any to ! 193.34.133.0/24 port = http -> 193.34.133.75 port 8080 because em2 my lan interface an I want to forward all 80 port to proxy server(75) but expect 193.34.133.0/24 because this network is my d

Re: [pfSense Support] tuning incoming load balancer

2007-11-13 Thread Paul M
Bill Marquette wrote: On 9/25/07, Bill Marquette <[EMAIL PROTECTED]> wrote: no, it says the IP is already in the list and refuses to add it; I guess that javascript could be changed to say "are you sure" and make it possible. Hmmm, the hackathon is coming up in a couple weeks. I'll take a loo