[pfSense Support] Help with IPSec

2007-05-03 Thread Diego Morato
Hi All, I need some help with packet loss and high latency inside ipsec tunnels. I'm running pfSense 1.2-BETA-1-TESTING-SNAPSHOT-04-30-07 with two offices connected to the main office. Inside these tunnels I´m always getting 5~10% of packet loss and latency 250~2000ms. The ipsec are configured

Re: [pfSense Support] MTU field

2007-04-09 Thread Diego Morato
Chris, Thank you. Sorry for this question! -- Diego - Original Message - From: "Chris Buechler" <[EMAIL PROTECTED]> To: Sent: Sunday, April 08, 2007 11:18 PM Subject: Re: [pfSense Support] MTU field Scott Ullrich wrote: >The MTU field on Interfaces page is not working as exp

Re: [pfSense Support] MTU field

2007-04-07 Thread Diego Morato
I forgot the pfsense version: 1.0.1-SNAPSHOT-03-27-2007 built on Sat Apr 7 13:40:06 EDT 2007 Hi, The MTU field on Interfaces page is not working as expected. ifconfig -a is always showing mtu=1500 even after reboots. -- Diego --

[pfSense Support] MTU field

2007-04-07 Thread Diego Morato
Hi, The MTU field on Interfaces page is not working as expected. ifconfig -a is always showing mtu=1500 even after reboots. -- Diego - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL

Re: [pfSense Support] bridged interface and "arp: moved..." messages

2007-04-07 Thread Diego Morato
." messages On 4/2/07, Diego Morato <[EMAIL PROTECTED]> wrote: Scott, The Shared Physical Netork option is not setting net.link.ether.inet.log_arp_movement in my box. I check and save, and unckek and save, and this always stay in 1. I´m using sysctl -a to list the onfigurations.

Re: [pfSense Support] Help with backup remote office conection

2007-04-07 Thread Diego Morato
1, 2007 10:48 PM Subject: Re: [pfSense Support] Help with backup remote office conection Diego Morato wrote: Acctualy the frame relay router is the default gateway of the LAN, I´m thinking in change this to the pfsense and work with static routes. I would leave the frame relay router as the

Re: [pfSense Support] IPSec Issue Report

2007-04-05 Thread Diego Morato
: Re: [pfSense Support] IPSec Issue Report On 4/5/07, Diego Morato <[EMAIL PROTECTED]> wrote: > I´m using ipsec to connect three branch offices. There is a issue with the > firewall described below: > > I´m not allowing output traffic from LAN subnet to WAN, so I disabled the &

[pfSense Support] IPSec Issue Report

2007-04-05 Thread Diego Morato
I´m using ipsec to connect three branch offices. There is a issue with the firewall described below: I´m not allowing output traffic from LAN subnet to WAN, so I disabled the default LAN rule "Default LAN -> any", however disabling this rules causes LAN subnet not reach the ipsec tunnels. After

Re: [pfSense Support] bridged interface and "arp: moved..." messages

2007-04-02 Thread Diego Morato
Scott, The Shared Physical Netork option is not setting net.link.ether.inet.log_arp_movement in my box. I check and save, and unckek and save, and this always stay in 1. I´m using sysctl -a to list the onfigurations. It only print 1 -> 0 at the top to the page. System: 1.0.1-SNAPSHOT-03-15

Re: [pfSense Support] Help with backup remote office conection

2007-03-31 Thread Diego Morato
Message - From: "Chris Buechler" <[EMAIL PROTECTED]> To: Sent: Saturday, March 31, 2007 10:48 PM Subject: Re: [pfSense Support] Help with backup remote office conection Diego Morato wrote: > Acctualy the frame relay router is the default gateway of the LAN, I´m > thin

Re: [pfSense Support] bridged interface and "arp: moved..." messages

2007-03-31 Thread Diego Morato
uot; messages Try rebooting the firewall to make sure. Scott On 3/31/07, Diego Morato <[EMAIL PROTECTED]> wrote: > I´ve checked the shared physical network option and I continue getting arp > messages from my team. > > > -- > Diego > > - Original Message

Re: [pfSense Support] bridged interface and "arp: moved..." messages

2007-03-31 Thread Diego Morato
I´ve checked the shared physical network option and I continue getting arp messages from my team. -- Diego - Original Message - From: "Scott Ullrich" <[EMAIL PROTECTED]> To: Sent: Saturday, March 31, 2007 7:14 PM Subject: Re: [pfSense Support] bridged interface and "arp: moved..." mes

[pfSense Support] Help with backup remote office conection

2007-03-31 Thread Diego Morato
Hi, I have two remote offices connected through frame relay. This frame relay is connected directly on the switches. Now I need to install a backup connection because this frame relay eventually goes down. I installed pfsense in all remote offices connected to the Internet with cable conne

Re: [pfSense Support] bridged interface and "arp: moved..." messages

2007-03-31 Thread Diego Morato
and "arp: moved..." messages On Fri, 30 Mar 2007, Diego Morato wrote: > Did you tried to check the option 'Shared Physical Network' under System: > Advanced functions? I don't think that really applies to my situation, as I'm not using a shared physical network

Re: [pfSense Support] L2tpd on pfsense?

2007-03-31 Thread Diego Morato
Tommy, You can use the PPTP to your Windows Clients. And the great diference between pptp on pfsense and linux is that you can do filter on client connections in the webgui. So you will have two layers of security, the first is the password provided to connect to the pptp server and the sec

Re: [pfSense Support] IPSec connection problem

2007-03-30 Thread Diego Morato
INFO: begin Aggressive mode. Mar 30 14:15:35 racoon: INFO: respond new phase 1 negotiation: 200.xx.93.210[500]<=>201.xxx.20.10[500] -- Diego - Original Message - From: "Diego Morato" <[EMAIL PROTECTED]> To: "Support PfSense" Sent: Friday, March 30, 20

[pfSense Support] IPSec connection problem

2007-03-30 Thread Diego Morato
Hi, I have two pfsense and trying to do a IPsec tunnel, however I´m having no sucess. The two points have static IP´s and first I used the default options of the webgui. After I´m followed this doc: http://doc.m0n0.ch/handbook/ipsec-tunnels.html. Is there something that need to be allow

Re: [pfSense Support] Log Rotation

2007-03-30 Thread Diego Morato
Thank you Gary! -- Diego - Original Message - From: "Gary Buckmaster" <[EMAIL PROTECTED]> To: Sent: Friday, March 30, 2007 10:32 AM Subject: Re: [pfSense Support] Log Rotation Diego Morato wrote: Hi All, I would like to know how pfsense rotate the log files,

Re: [pfSense Support] bridged interface and "arp: moved..." messages

2007-03-30 Thread Diego Morato
Did you tried to check the option 'Shared Physical Network' under System: Advanced functions? -- Diego - Original Message - From: "Charles Sprickman" <[EMAIL PROTECTED]> To: Sent: Thursday, March 29, 2007 9:27 PM Subject: Re: [pfSense Support] bridged interface and "arp: moved..." mes

[pfSense Support] Log Rotation

2007-03-30 Thread Diego Morato
Hi All, I would like to know how pfsense rotate the log files, how days it is stored and how do I configure this. I need to know this because we have auditors that from time to time do audits in this logs. In other systems I rotate the logs monthly and keep in HD for 24 months. -- Diego

Re: [pfSense Support] Multi-Wan/Load Balancing

2007-03-29 Thread Diego Morato
ct: Re: [pfSense Support] Multi-Wan/Load Balancing On 3/29/07, Diego Morato <[EMAIL PROTECTED]> wrote: Hi All, I´m folowing the documentation (http://doc.pfsense.org/index.php/Multi-Wan/Load-Balancing) to setup a Multi-Wan/Load Balancing environment, however after create the pool, I´m gettin

Re: [pfSense Support] Multi-Wan/Load Balancing

2007-03-29 Thread Diego Morato
Ok, thank you. I will test this and report any problems. Diego - Original Message - From: "Scott Ullrich" <[EMAIL PROTECTED]> To: Sent: Thursday, March 29, 2007 1:25 PM Subject: Re: [pfSense Support] Multi-Wan/Load Balancing On 3/29/07, Diego Morato <[EMAIL PROTECT

[pfSense Support] Multi-Wan/Load Balancing

2007-03-29 Thread Diego Morato
Hi All, I´m folowing the documentation (http://doc.pfsense.org/index.php/Multi-Wan/Load-Balancing) to setup a Multi-Wan/Load Balancing environment, however after create the pool, I´m getting a error when I click on Apply button: Warning: unlink(/tmp/Wan1BalanceWan2.pool): No such file or