Re: [pfSense Support] Firewall security compromised by auxillary programs?

2011-02-05 Thread Pandu Poluan
On Sat, Feb 5, 2011 at 02:54, Mark Jones mjo...@imagehawk.com wrote: Well, I hear of people running pfSense in a VM, and I wonder how do you avoid exposing the host OS to the network?  How can a firewall be run in a VM and not leave the host OS hanging out to be attacked?  Or, go the otherway

Re: [pfSense Support] Can anyone build a 1.2.3 ISO?

2011-02-02 Thread Pandu Poluan
I agree with Jim. A firewall box should be exclusively a firewall, no matter how 'stout' it is. More components == more attack surface area. Not to mention the intricacies of interaction that might bollix the firewall's mechanisms in a non-repeatable way. Better to put all analysis packages in

Re: [pfSense Support] pfSense routing

2011-01-21 Thread Pandu Poluan
Have you configured the Cisco router with a static route to the XP's network? Rgds, On 2011-01-21, Danny metal...@gmail.com wrote: Hi, I´ve got a 1.2.3 pfSense connected this way: XP [LAN] PFSense [WAN] --- [WAN] Cisco router [LAN] I can ping from XP to LAN and WAN pfsense

Re: [pfSense Support] pfSense routing

2011-01-21 Thread Pandu Poluan
, virtual XP, with VMWare using GNS3... maybe that causes that weird behaviour. thanks a lot Rgards On Fri, Jan 21, 2011 at 12:52 PM, Pandu Poluan pa...@poluan.info wrote: Have you configured the Cisco router with a static route to the XP's network? Rgds, On 2011-01-21, Danny metal

Re: [pfSense Support] autorollback?

2011-01-13 Thread Pandu Poluan
Although I never found myself in a situation where I need to have an auto-revert, I can see how this will be useful for some. Or for myself, someday. Rgds, On 2011-01-14, David Burgess apt@gmail.com wrote: On Thu, Jan 13, 2011 at 2:00 PM, Charles N Wyble char...@knownelement.com wrote:

Re: [pfSense Support] Trouble with VIP?

2011-01-06 Thread Pandu Poluan
Yes, I've setup NAT for TCP/UDP. No joy. Rgds, -- Pandu E Poluan On Thu, Jan 6, 2011 at 15:22, Chris Buechler cbuech...@gmail.com wrote: On Thu, Jan 6, 2011 at 12:58 AM, Pandu Poluan pa...@poluan.info wrote: Hello again! I think I'm having trouble with VIP. The scenario is this (IP

Re: [pfSense Support] Re: Trouble with VIP?

2011-01-06 Thread Pandu Poluan
TCP and UDPCan you share the screen shot of your firewall rule..? On Thu, Jan 6, 2011 at 1:18 PM, Pandu Poluan pa...@poluan.info wrote: Yes, I was accessing the external IP address from a different network. E.g. The 100.x.y.z is on ISP A, I tried to access it from a computer with IP 200

[pfSense Support] Re: Trouble with VIP?

2011-01-06 Thread Pandu Poluan
blackened nets are 192.168.1. Rgds, --Pandu E Poluan On Thu, Jan 6, 2011 at 15:22, Abdulrehman arvagabo...@gmail.com wrote: ok...for DNS...you need to allow both TCP and UDPCan you share the screen shot of your firewall rule..? On Thu, Jan 6, 2011 at 1:18 PM, Pandu Poluan pa

[pfSense Support] Trouble with VIP?

2011-01-05 Thread Pandu Poluan
Hello again! I think I'm having trouble with VIP. The scenario is this (IP addresses obfuscated): + WAN address is 100.2.2.8/25 + LAN address is 192.168.1.1/24 + I create a VIP, CARP, 100.2.2.9/25 Now, I tried to make a NAT: + 100.2.2.9:53 forwards to 192.168.1.20:53 + A firewall rule is

Re: [pfSense Support] 1 big pfSense or 2 smaller ones?

2011-01-04 Thread Pandu Poluan
input very much. Rgds, -- Pandu E Poluan On Wed, Jan 5, 2011 at 09:42, Jesse Vollmar vollm...@gmail.com wrote: On Tue, Jan 4, 2011 at 9:32 PM, Pandu Poluan pa...@poluan.info wrote: Hello, I am planning to deploy pfSense, mostly for firewall and NAT, on my production Cloud. It is based