Tag Info

New answers tagged

0

Rebooting pfsense solved the problem, but it is no good feeling, if you donĀ“t know if your phone will work :-(( I am still interrested in ideas and suggestions of the cause of my problem! Regards, Karl


1

They should really route you the second subnet, assigning it to their routers is dumb and a waste of IP space. That doesn't change things too much either way though. A VIP on WAN will suffice in that circumstance unless they did something really stupid with your new subnet, like putting it on an entirely different router and forcing you to route that through ...


0

I finally sorted it. The client remote and local networks were set to 192.168.0.1 and 192.168.10.1, which is wrong. It should have been the networks (0.0 and 10.0). The client is using a Draytek Vigor 3200 Router for reference.


0

i have the same similar issue with you, Failed negotiation on phase 2, but the problem isn't on the phase 2 conf. i just change the Negotiation mode on phase 1 as Aggressive then IPSec working properly . hope this answer can fix your issue :)


0

Failed to get sainfo means that the racoon process cannot get the sainfo line from the racoon.conf config file that will match the incoming pair of IP addresses. In your particular case the following pair doesn't match (for obvious reason): Dec 2 08:41:03 racoon: DEBUG: cmpid source: '192.168.10.0/24' Dec 2 08:41:03 racoon: DEBUG: cmpid target: ...


0

Definitely use Squid proxy. It understands URL's. Most free firewalls just understand IP addresses and ports right now. You can do simple IP based filters for source IP's (admins vs normal users) You can do regex based destination url filters (for blacklist/whitelists) You can do use authentication to do more sophisticated filtering The squid docs can be ...


-1

What you need to do is create 2 virtual switches. First one will be connected to a network interface with public IP and other one will be for internal use. Connect pfSync to both, while all other VMs should be connected only to internal switch. Then set up NAT in pfSync. But, problem is you only have 1 public IP at your disposal, and that IP should be ...


0

yes but my problem is the ip-range in WAN side is the same. So all 3 IP-Adresses are in the same range with one default GW on WAN side. regards


0

You can use the pf route-to clause to forward traffic via specific interface. You can try something like that, considering ISP1 interface is vlan1 and it's the interface with default gateway: isp1if = "vlan1" isp2if = "vlan2" isp1ip = "192.168.0.1" isp2ip = "192.168.1.1" isp2gateway = "192.168.10.1" nat on $isp1if proto tcp from $isp1ip to any port 25 -> ...



Top 50 recent answers are included