Reputation
2,288
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
5 10
Newest
 Nice Answer
Impact
~161k people reached

  • 0 posts edited
  • 0 helpful flags
  • 53 votes cast
2d
comment Putting remote Linux server in local VPN
It's just enabled the same way any service is. I'm not sure about Fedora, but on Debian if you enable the OpenVPN service, it'll launch on /etc/openvpn/*.conf automatically at boot time.
2d
answered FreeBSD pfsense root CA fails
Apr
30
comment pfsense: connection between two internal lans dropped after 20 seconds
are any of them dual homed? have an IP on both subnets. It's generally pointless, and considered bad network design, to have two IP subnets on the same broadcast domain. Would be much better to split that off into VLANs or otherwise separate the broadcast domain, or just keep it all on the same network.
Apr
30
answered Putting remote Linux server in local VPN
Apr
30
answered VoIP calls dropping
Apr
30
comment pfsense: connection between two internal lans dropped after 20 seconds
so are those not actually separate networks, they're two subnets on the same interface?
Apr
30
answered pfsense: connection between two internal lans dropped after 20 seconds
Mar
24
comment pfSense/strongSwan “deleting half open IKE_SA after timeout” - IPSec connection Android 4.4 to pfSense 2.2.1 fails
That is the root problem. It's only an issue with aggressive mode + PSK. Changing to RSA instead of PSK is the best solution.
Jan
29
awarded  Nice Answer
Jan
16
comment Using Free/Open BSD + pf as a DDoS filter
It's absolutely true. It's 4 years later so things are a little diff today, but still today finding a firewall that'll handle line rate multi-Gb at 64 byte frames is difficult to impossible depending on what options you want to or can afford to consider. It's much more practical to find something that'll do 1 Gb line rate with 64 byte frames today than it was in 2011. Just multiply that 1 Gb a few times to take into account the years, and it's still true today.
Dec
14
answered pfSense: How to add a second WAN subnet for dummies
Sep
24
awarded  Autobiographer
Sep
3
awarded  Yearling
Aug
16
comment How to setup pfSense with multiple public IP's
Policy route is any firewall rule that specifies a gateway.
Aug
7
answered How to setup pfSense with multiple public IP's
Jul
26
comment pfSense failover and OpenVPN site-to-site
The "interface" box determines what IP is bound, that's where you pick the CARP IP. Trust me...I only founded pfSense and literally wrote the book on it.
Jul
26
comment pfsense long ping to google
Better to have a local cache with the DNS forwarder, and its behavior of querying all configured servers simultaneously taking the fastest response, rather than clients waiting for a timeout, moving to another server, rinse and repeat.
Jul
24
comment pfSense dropping gateway interface randomly
Where you can set it as static, that's always preferable. Not because there's any problem inherent in doing DHCP generally speaking, but there are cases with some cable modems for instance in the "modem assigns you a private IP" scenario I mentioned where a static WAN might mask that kind of problem.
Jul
24
comment IPSec L2L Failover between two pfSense devices
OpenVPN can and will fail over. IPsec as well, not aware of any significant issues there, though there are occasional circumstances where you need the Sys>Advanced option to restart IPsec on WAN failure for it to successfully come up on the other WAN.
Jul
24
answered pfSense failover and OpenVPN site-to-site