[pfSense Support] autobackup of the pfsense cluster via tftp

2010-04-12 Thread luismi
Our config here... Requirements: - Install tftp-hpa package - Install bash-static package (an error is indicated but can be ignored) - execute 'rehash' - Create the next script !#/usr/local/bin/bash fw=`hostname | cut -d. -f1` cp /cf/config/config.xml /tmp/$fw-config -

[pfSense Support] strange routing behaviour with static routes, packet leak? at least packet lost.

2010-03-31 Thread luismi
Scenario /--cust vlan--\ | | B B Cust<>rsat A--vlan FW2SAT---PFsense---vlan FW2Inet---A rinet Specific static routes defined in the pfsense

RE: [pfSense Support] Install w/o cdrom

2009-11-25 Thread luismi
I used the virtual drive of the ILO2 without problems. El mié, 25-11-2009 a las 16:41 +, Joseph L. Casale escribió: > >It's a lot easier to install with the drive in another machine that > >has a CD-ROM and then move the drive to the target machine. > > That's a possibility, but given I don't

Re: [pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread luismi
I know I know XD El jue, 12-11-2009 a las 18:25 -0500, Scott Ullrich escribió: > On Thu, Nov 12, 2009 at 6:08 PM, luismi wrote: > > As far as I see right now in the web: live support is offline > > Looks online here: https://portal.pfsense.

Re: [pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread luismi
As far as I see right now in the web: live support is offline El jue, 12-11-2009 a las 17:26 -0500, Chris Buechler escribió: > On Thu, Nov 12, 2009 at 5:22 PM, luismi wrote: > > I called several times this around two hours ago, no reply, nice IVR, > > but no reply. > > >

Re: [pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread luismi
I called several times this around two hours ago, no reply, nice IVR, but no reply. online support at the web was also offline :P El jue, 12-11-2009 a las 17:15 -0500, Chris Buechler escribió: > Not sure what you're talking about? > >

[pfSense Support] where is the support? is bank holiday in usa?

2009-11-12 Thread luismi
- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org

Re: [pfSense Support] raccon message: racoon: ERROR: libipsec failed pfkey align (Invalid sadb message)

2009-09-02 Thread luismi
Yes I know that link and I checked my config and seems to be ok. The cisco side is: crypto isakmp policy 10 encr 3des authentication pre-share group 2 lifetime 3600 crypto isakmp key address 11.22.33.44 no-xauth crypto isakmp invalid-spi-recovery crypto isakmp keepalive 10 ! ! crypto

[pfSense Support] raccon message: racoon: ERROR: libipsec failed pfkey align (Invalid sadb message)

2009-09-02 Thread luismi
Is there anyone here with experience with this message "racoon: ERROR: libipsec failed pfkey align (Invalid sadb message)"? Pfsense version is 1.2.2 and the remote side is a cisco router. Everything seems to be ok, but we have some connectivity problems with some servers and I don't know if they a

Re: [pfSense Support] ipsec vpn against the carp VIP address?

2009-08-28 Thread luismi
After a failover, ipsec will negotiate everything again no? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsens

[pfSense Support] ipsec vpn against the carp VIP address?

2009-08-27 Thread luismi
Hi again, I have the ipsec created between the pfsense (physical ip address) and the remote cisco (public ip address). I would like to know if it is possible to create the vpn against the CARP address, I am not sure, is that possible? ---

[pfSense Support] %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Quick mode failed with peer at 11.22.33.44

2009-08-27 Thread luismi
Hi all, I just configured a cisco 1841 to create a ipsec vpn against another network (exactly against a PFSense box) and I am seeing a lot messages like %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Quick mode failed with peer at 11.22.33.44 %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Quick mode f

Re: [pfSense Support] PfSense_advanced_etherchannel_and_vlan_howto_with_cisco_2900

2009-08-05 Thread luismi
Yes, I didn't take note about the HEAD version, I read the document just putting focus on the Etherchannel configuration :-D >From the point of view of Cisco, what type of FEC are you using? LACP? LAGP? on? El mié, 05-08-2009 a las 12:12 +0200, Aarno Aukia escribió: > Hi luismi, >

[pfSense Support] PfSense_advanced_etherchannel_and_vlan_howto_with_cisco_2900

2009-08-05 Thread luismi
Hi all, I was reviewing the document http://chaos.untouchable.net/index.php/PfSense_advanced_etherchannel_and_vlan_howto_with_cisco_2900 And I was looking for the way to do that in our pfsense 1.2.2 but I didn't see any option in the web interface, so, should it be done at low level with the shel

Re: [pfSense Support] syslog-ng config to record events from fws

2009-05-13 Thread luismi
ion(pf-d_sshd); }; log { source(pf-fw2); filter(pf-f_pptpd); destination(pf-d_pptpd); }; log { source(pf-fw2); filter(pf-f_daemon); destination(pf-d_daemon); }; log { source(pf-fw2); filter(pf-f_firewall); destination(pf-d_firewall); }; El mié, 13-05-2009 a las 06

Re: [pfSense Support] syslog-ng config to record events from fws

2009-05-13 Thread luismi
PF El mar, 12-05-2009 a las 11:15 -0600, RB escribió: > On Tue, May 12, 2009 at 10:59, luismi wrote: > > Hi, well, I was looking for something more complex. > > http://catb.org/~esr/faqs/smart-questions.html#beprecise > > Ask a nebulous question, you get a nebulous ans

Re: [pfSense Support] syslog-ng config to record events from fws

2009-05-12 Thread luismi
Hi, well, I was looking for something more complex. El lun, 11-05-2009 a las 18:16 +0100, Michael Schmitt escribió: > luismi schrieb: > > Hi all, > > > > Can anyone forward me a template to configure syslog-ng for pfsense >

[pfSense Support] syslog-ng config to record events from fws

2009-05-11 Thread luismi
Hi all, Can anyone forward me a template to configure syslog-ng for pfsense logs? Thanks - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support av

RE: [pfSense Support] Template to connect a Cisco router to PFSense using IPSec

2009-04-01 Thread luismi
g/index.php/IPSec_between_pfSense_and_a_Cisco_PIX > > > > -Original Message- > From: luismi [mailto:asturlui...@gmail.com] > Sent: Mon 3/30/2009 3:05 PM > To: support@pfsense.com > Subject: [pfSense Support] Template to connect a Cisco router to PFSense > using IP

Re: [pfSense Support] Filtering by URL or regexp

2009-03-31 Thread luismi
Ok, far enough. El mar, 31-03-2009 a las 20:19 +0200, Ermal Luçi escribió: > Its in 2.0 with the layer7 filter/shaper > > On Tue, Mar 31, 2009 at 7:09 PM, luismi wrote: > > Hi again, > > > > I am searching with google -I am sorry, I didn't do that before- but th

Re: [pfSense Support] Filtering by URL or regexp

2009-03-31 Thread luismi
+0100, Michael Schuh escribió: > look at squid > acl-rules par example > you can also generate lists to load in squid > für deny or allow... > > > 2009/3/31 luismi > Is possible to create rules to match URLs or regext > expression? > I w

Re: [pfSense Support] Filtering by URL or regexp

2009-03-31 Thread luismi
Ah ok :-] El mar, 31-03-2009 a las 11:39 -0500, Gary Buckmaster escribió: > luismi wrote: > > Is possible to create rules to match URLs or regext expression? > > I would like to provide access just to *.foobar.com but I don't know the > >

[pfSense Support] Filtering by URL or regexp

2009-03-31 Thread luismi
Is possible to create rules to match URLs or regext expression? I would like to provide access just to *.foobar.com but I don't know the IPs used for that domain :-/ - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For a

[pfSense Support] Template to connect a Cisco router to PFSense using IPSec

2009-03-30 Thread luismi
Is there anyone here, in the list, with a template to configure a Cisco router against a pfsense firewall using ipsec? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfse

Re: [pfSense Support] Massive static route load

2009-03-16 Thread luismi
, Curtis LaMasters escribió: > If I understand you correctly, you can just add them from the GUI from > System>Static Routes. If that isn't what you needed, let us know. > > Curtis > > On 3/16/09, luismi wrote: > > Hi all, > > > > Is there anyway to

[pfSense Support] Massive static route load

2009-03-16 Thread luismi
Hi all, Is there anyway to load several static routes at the same time? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https: