Re: [pfSense Support] Next proxy for pfSense firewall

2007-01-04 Thread joseph . favia
Hi, Is the modified "globals.inc" file kept anywhere that can be downloaded? I tried modifying the xmlrpc_client.inc file myself but keep getting an error when I attempt to access the packages. A complete example would be appreciated. This is the message in the system log : php: /pkg_mgr.php: XML

[pfSense Support] Remote administration through WAN interface

2007-01-04 Thread joseph . favia
Hello, I would like to allow remote administration of a pfSense firewall by means of a web browser (http) but cannot get it to work through the WAN interface. (Yeah, I know the implications of such a configuration! I'd like to change it to https once I get it to work...) There apparently are no p

Re: [pfSense Support] Next proxy for pfSense firewall

2007-01-04 Thread joseph . favia
Thanks alot Bill! I've tried the changes but I still get an error, although different. I have no control over the proxy machine so I can't get much info from that box to help me understand what doesn't work. I'm going to upgrade the release of pfSense first and then try with both the production pro

Re: [pfSense Support] Next proxy for pfSense firewall

2007-01-04 Thread joseph . favia
eaks packages for them or > not. I'd like to MFC this today if possible so I can forget about it > :) > > --Bill > > ----- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > -- Joseph Favia Jr. Security Consultant Te

Re: [pfSense Support] Next proxy for pfSense firewall

2007-01-04 Thread joseph . favia
Hello, Another side effect that I've been seeing is the following after applying any changes in the policy: Warning: Cannot modify header information - headers already sent by (output started at /etc/inc/pkg-utils.inc:908) in /usr/local/www/firewall_rules_edit.php on line 335 Any thoughts? Joe

[pfSense Support] CARP problem or not?

2007-03-15 Thread joseph . favia
Hi I've set up 2 PFSENSE machines with CARP and it seems to work well although I find the following messages in the system log of the BACKUP machine : "kernel : arp_rtrequest : bad gateway 111.222.333.444 (!AF_LINK)" "A communications error occurred when attempting XMLRPC sync with 111.222.333.1

[pfSense Support] Next proxy for pfSense firewall

2007-01-04 Thread Joseph Favia Jr.
Hello, I'm setting up pfSense as a deparmental firewall within my network in order to seperate a specific LAN from the rest of the world. In order to access the Internet by means of HTTP or FTP protocols I must refer my browser to a proxy server. When I try to download any packages (CVS) the

Re: [pfSense Support] Remote administration through WAN interface

2007-01-05 Thread Joseph Favia Jr.
Yeah, that seems to have solved the problem, although we first started our tests with public addressesuhmm, maybe just mucked up with the addresses, ports and netmasks somewhere/sometime. thanks to all. Joe Holger Bauer wrote: http://faq.pfsense.org/index.php?action=artikel&cat=10&id

[pfSense Support] PFSense Administrators

2007-01-05 Thread Joseph Favia Jr.
Hi, Is there only one administrator user in pfsense? As far as I can see, there is only a single user for the webgui, but how about the BSD users? I would like to setup two different administrators for the firewall, and each user should have his own password. This cannot be accomplished thro

Re: [pfSense Support] PFSense Administrators

2007-01-08 Thread Joseph Favia Jr.
Does anyone know some details regarding the new upcoming implementation? Joe Bill Marquette wrote: On 1/5/07, Tim Dickson <[EMAIL PROTECTED]> wrote: I'm not certain about the BSD users... (although it seems logical that it would work) I do know that a multiuser environment is being developed

Re: [pfSense Support] Next proxy for pfSense firewall

2007-01-12 Thread Joseph Favia Jr.
L PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Joseph Favia Jr. Security Consultant - Managed Security Services Eunics spa Tel. Fisso: +390803855397 Tel. Mobile: +39 3486712036 Fax: +39 080 3855951x Ai sensi e per gli effetti della Legge sulla tutela della riservatezza persona

[pfSense Support] Problems viewing mirrored tutorials

2007-02-05 Thread Joseph Favia Jr.
Hi, I can't view any of the tutorials that are mirrored through the TUTORIALS page (http://pfsense.com/index.php?id=36). It seems to be some sort of Flash content, but nothing ever gets loaded. I can view/download the others that are directly connected to the site (i.e. transparent firewall).

[pfSense Support] VLAN support

2007-02-07 Thread Joseph Favia Jr.
Hi, My pfsense machine has only got 3 physical interfaces and now I need another network on which I've got to place a few new servers. Is there any other method of defining an extra network without having to open up my hardware? I read there is VLAN support in PFSENSE, but cannot find any doc

Re: [pfSense Support] Pure router.

2007-02-13 Thread Joseph Favia Jr.
Hi, When you say you've deactivated the firewall rules what do you exactly mean? I would suggest : * use ACCEPT ALL rules (ANY to ANY) on your interfaces * remove the BLOCK Private Addresses feature on the WAN interface This should allow PFSENSE to work as a router. You will probably al

Re: [pfSense Support] Pure router.

2007-02-13 Thread Joseph Favia Jr.
last example you've got multiple default gateways : I would avoid this kind of situation - I've always had problems with it. Cheers Joe Manuel Trujillo wrote: Joseph Favia Jr. escribió: Hi, When you say you've deactivated the firewall rules what do you exactly m

Re: [pfSense Support] ESX + CARP solution found

2007-03-09 Thread Joseph Favia Jr.
Hi, This worked fine when I was using a switch with no VLAN configuration , but as soon as we defined VLANs on the switch, it seems that the PFSense machine has lost contact with all other machines, both virtual and physical. Are the VLANs defined at the switch level transparent to the virtua

Re: [pfSense Support] CARP problem or not?

2007-03-19 Thread Joseph Favia Jr.
I saw the FAQ but wasn't really sure if I understood it correctly or if it was wrong : it seemed strange to me :-) . I've installed rules on the CARP interface to accept anything from anyone (like all interfaces at the moment), but the message is the same. I read the first tutorial you indica