Tag Info

New answers tagged

0

You will need to create a virtual adapter (ie, tap0) that belongs to the bridge and give it an IP (say 192.168.1.1) then connect all the VMs to that bridge and have them use 192.168.1.1 as their gateway, and setup the Proxmox host to do NAT by enabling ip forwarding (add "net.ipv4.ip_forward=1 to /etc/sysctl.conf and run sysctl -p) and then add in the NAT ...


0

So you want to control the traffic on a per-service basis, is that correct? Do you have the services configured to only listen on the Service IP? I would think that would resolve the issue. IE, the management workstation attempts to access port 80 on the service network IP of the server. Since that service is only available on that IP/interface, the ...


1

I found some very strange things going on with IAX2 and PFsense. I've got the latest PFsense (2.2.1 Mar 13 2015) and this has been consistent with all my experiences prior, as well: PFsense appears to be NOT applying NAT rules to IAX2 packets. If I set up a packet dump on pppoe0 (going to my DSL carrier) I see packets coming from 192.168.1.168 port 4569, ...


1

I've been having this exact same issue. As per this [IKEv1 can't connect from Android's default vpn client], there is a bug in the current Android VPN IKEv1 client that happens if aggressive mode is selected and a "IPsec identifier" is used to configure the Android client. The solution is to clear the "IPsec identifier" entry from the android client and in ...


0

An old thread I know, but for the benefit of anyone else landing here I found (in pfSense 2.2 anyway) that you still have to enter a timeserver but if you tick the "noselect" box against every timeserver you will completely disable NTP. Unfortunately that also prevents pfSense acting as an NTP server so you can't use it as the time server on you local ...


1

Use split DNS (split horizon), but not on a server running Microsoft software - it doesn't work. On your local DNS recursor/cacher you can usually create a specific override for a FQDN to map to a different IP. This adds exactly one CI to your CMDB and isn't unusual or complex at all. Depending on your setup, you usually do this on your network gateway ...


2

This website is using SSL Client certificates for authentication. The dialog box is asking you to specify which certificate you'd like to authenticate with.


0

Okay, the solution to this was to remove all the NAT rules from PFSense and put the actual local subnet as the local domain in pfsense phase 2 entry on site A, then put the encryption domain as the "address to translate". Route traffic from app servers through pfsense and anything destined for site B enc domain will be routed over ipsec!


1

but doing a traceroute from the pfsense machine to an ip in the encryption domain range sends the traffic out over the internet This is a clear indication that you do not have your IPsec Phase 2 entries configured correctly. IPsec matches traffic purely on source/dest IP subnet, and if it's not sending your desired traffic down the tunnel, you have a ...


0

I'm having this same issue. Following that pfsense document allowed the VPN to connect, but no traffic was going through the remote LAN. The answer for me was to also add a firewall rule on my pfsense LAN to destination of the public VPN IP address on the other side of the established tunnel. I'm sure that this has something to do with the way my ISP at work ...



Top 50 recent answers are included