Re: [pfSense Support] VPN Connections behind pfSense NAT

2009-08-12 Thread Chris Buechler
On Wed, Aug 12, 2009 at 4:55 PM, apiase...@midatlanticbb.com wrote: > Chris Buechler wrote: >> >> On Wed, Aug 12, 2009 at 10:52 AM, >> apiase...@midatlanticbb.com wrote: >> >>> >>> Having a problem with vpn setup wondering if anyone else is also?? >>> >>> The VPN software is Cisco. >>> >>> >> >> Th

[pfSense Support] RE: Multiwan - no loadbalance needed

2009-08-12 Thread Michel Servaes
>To put it simple (I think), is that OPT1 should be treated as incoming >traffic, and WAN should only be used for outgoing traffic (eg. >internet, radio, downloading, ...) > >Hope this makes sense... kind regards It was indeed a sanity check... and it would be the first time actually implementing

Re: [pfSense Support] IGMP packet out of WAN

2009-08-12 Thread Evgeny Yurchenko
Scott Ullrich wrote: On Wed, Aug 12, 2009 at 10:57 AM, Scott Ullrich wrote: On Tue, Aug 11, 2009 at 8:02 PM, Evgeny Yurchenko wrote: http-push.c:1269: error: 'parser' undeclared (first use in this function) gmake: *** [http-push.o] Error 1 *** Error code 1 Stop in

Re: [pfSense Support] VPN Connections behind pfSense NAT

2009-08-12 Thread apiase...@midatlanticbb.com
Chris Buechler wrote: On Wed, Aug 12, 2009 at 10:52 AM, apiase...@midatlanticbb.com wrote: Having a problem with vpn setup wondering if anyone else is also?? The VPN software is Cisco. The Cisco has to have NAT-T enabled. Thanks, The bigger problem is that they are "claiming" they

Re: [pfSense Support] ultrasurf

2009-08-12 Thread Tim Nelson
- "Zhu Sha Zang" wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hey, i'm using pfsense with transparent proxy (squid + squidGuard) > working well here. > > But some users on my network are using ultrasurf that everything know > use port 443 to connect on proxyes around internet

Re: [pfSense Support] VPN Connections behind pfSense NAT

2009-08-12 Thread Chris Buechler
On Wed, Aug 12, 2009 at 10:52 AM, apiase...@midatlanticbb.com wrote: > Having a problem with vpn setup wondering if anyone else is also?? > > The VPN software is Cisco. > The Cisco has to have NAT-T enabled. - To unsubscribe, e-m

[pfSense Support] Importing SSL certs for Web GUI

2009-08-12 Thread Joseph L. Casale
Anyone know what is involved in setting up a cert when using a windows CA? I can use OpenSSL on a Linux host to do the conversion from the format the Windows CA outputs (I don't know if I can output it natively?). What do I use for the RSA private key, or more to the effect, how do I get that out

[pfSense Support] ultrasurf

2009-08-12 Thread Zhu Sha Zang
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey, i'm using pfsense with transparent proxy (squid + squidGuard) working well here. But some users on my network are using ultrasurf that everything know use port 443 to connect on proxyes around internet. Isn't possible to block 443 port and open

RE: [pfSense Support] Re: 1.2.3-RC1 Web gui logout

2009-08-12 Thread Joseph L. Casale
>> Can ff be setup to do this? > >In Windows FF3.5 > >Tools>Clear Recent History>Details>Active Logins > >I believe that should do it. Fantastic, thanks! jlc

Re: [pfSense Support] 1.2.3-RC1 Web gui logout

2009-08-12 Thread Scott Ullrich
On Wed, Aug 12, 2009 at 1:10 PM, David Burgess wrote: > You could use a different browser for pfsense. It's an inconvenience, > but probably more convenient than closing all your tabs. Install the "Web Developer Toolbar" for firefox and then select Miscellaneous -> Clear Private Data -> HTTP Authe

Re: [pfSense Support] Re: 1.2.3-RC1 Web gui logout

2009-08-12 Thread David Burgess
On Wed, Aug 12, 2009 at 11:10 AM, Joseph L. Casale wrote: > Can ff be setup to do this? In Windows FF3.5 Tools>Clear Recent History>Details>Active Logins I believe that should do it. db - To unsubscribe, e-mail: support-unsub

Re: [pfSense Support] 1.2.3-RC1 Web gui logout

2009-08-12 Thread David Burgess
On Wed, Aug 12, 2009 at 11:00 AM, Joseph L. Casale wrote: > Argh, that means I have to close my browser:) I always have so much open > like Nagios etc in other tabs... You could use a different browser for pfsense. It's an inconvenience, but probably more convenient than closing all your tabs. d

RE: [pfSense Support] Re: 1.2.3-RC1 Web gui logout

2009-08-12 Thread Joseph L. Casale
>You could close your browser, or you could use a browser that implements >a method to forget HTTP authentication. I would be interested in a reco for an alternative browser then, sure. I use ff only because its foot print is light and it works well, hell I'd use ie on my windows workstation if it

[pfSense Support] Re: 1.2.3-RC1 Web gui logout

2009-08-12 Thread Dave Warren
In message "Joseph L. Casale" was claimed to have wrote: >>There isn't one in the 1.2 series since it uses HTTP authentication. > >Argh, that means I have to close my browser:) You could close your browser, or you could use a browser that implements a method to forget HTTP authentication. ---

RE: [pfSense Support] 1.2.3-RC1 Web gui logout

2009-08-12 Thread Joseph L. Casale
>There isn't one in the 1.2 series since it uses HTTP authentication. Argh, that means I have to close my browser:) I always have so much open like Nagios etc in other tabs... Thanks! jlc

Re: [pfSense Support] 1.2.3-RC1 Web gui logout

2009-08-12 Thread RB
On Wed, Aug 12, 2009 at 10:15, Joseph L. Casale wrote: > Silly question, where the heck is the logout button? There isn't one in the 1.2 series since it uses HTTP authentication. - To unsubscribe, e-mail: support-unsubscr...@pfse

Re: [pfSense Support] IGMP packet out of WAN

2009-08-12 Thread Scott Ullrich
On Wed, Aug 12, 2009 at 10:57 AM, Scott Ullrich wrote: > On Tue, Aug 11, 2009 at 8:02 PM, Evgeny Yurchenko wrote: >> >> cd /usr/ports/devel/git && make install >> >> -- Ends with >> ===>  Configuring for git-1.6.4 >> ===>  Building for git-1.6.4 >> GIT_VERSION = 1.6.4 >>     * new build flags or pr

[pfSense Support] 1.2.3-RC1 Web gui logout

2009-08-12 Thread Joseph L. Casale
Silly question, where the heck is the logout button? jlc - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.or

Re: [pfSense Support] IGMP packet out of WAN

2009-08-12 Thread Scott Ullrich
On Tue, Aug 11, 2009 at 8:02 PM, Evgeny Yurchenko wrote: > > cd /usr/ports/devel/git && make install > > -- Ends with > ===> Configuring for git-1.6.4 > ===> Building for git-1.6.4 > GIT_VERSION = 1.6.4 > * new build flags or prefix > ... many compilations here ... > http-push.c:14:19: er

[pfSense Support] VPN Connections behind pfSense NAT

2009-08-12 Thread apiase...@midatlanticbb.com
Having a problem with vpn setup wondering if anyone else is also?? The VPN software is Cisco. This is the setup VPN Client -> Ethernet Switch -> pfsense -> Internet <- VPN Concentrator A client behind a pfsense can use internet, email, everything else just fine, expect VPN. When i run a pac

Re: [pfSense Support] Multiwan - no loadbalance needed

2009-08-12 Thread Gary Buckmaster
Michel Servaes wrote: Hi, When reading several posts, I found much info about load balancing... but this is something I don't need. What I would like to have, is to route all internet traffic through one interface (an PPPoE session), and some traffic (terminal server & smtp) from the other inte

Re: [pfSense Support] Multiwan - no loadbalance needed

2009-08-12 Thread David Burgess
On Wed, Aug 12, 2009 at 4:36 AM, Michel Servaes wrote: > To put it simple (I think), is that OPT1 should be treated as incoming > traffic, and WAN should only be used for outgoing traffic (eg. > internet, radio, downloading, ...) Looks good to me. Was there a question, or just checking for sanity

[pfSense Support] Multiwan - no loadbalance needed

2009-08-12 Thread Michel Servaes
Hi, When reading several posts, I found much info about load balancing... but this is something I don't need. What I would like to have, is to route all internet traffic through one interface (an PPPoE session), and some traffic (terminal server & smtp) from the other interface (incoming). If I

Re: [pfSense Support] port 25

2009-08-12 Thread Simon Dick
2009/8/11 Fabien Germain : > Hi, > > On Tue, Aug 11, 2009 at 12:13 PM, Kevin Kimani > wrote: >> >> Not going through dont understand how you are able to do that >> >> "mail kevin # telnet mail.aphrc.org 25 >> Trying 41.220.120.26... >> telnet: Unable to connect to remote host: Connection timed out