Reputation
2,308
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
5 10
Newest
 Nice Answer
Impact
~166k people reached

  • 0 posts edited
  • 0 helpful flags
  • 53 votes cast
May
22
answered Creating a separate PPTP VPN VLan in network with tagging possible?
May
22
answered How to pass all requests to some site via specific WAN interface in pfSense?
May
1
comment Putting remote Linux server in local VPN
It's just enabled the same way any service is. I'm not sure about Fedora, but on Debian if you enable the OpenVPN service, it'll launch on /etc/openvpn/*.conf automatically at boot time.
May
1
answered FreeBSD pfsense root CA fails
Apr
30
comment pfsense: connection between two internal lans dropped after 20 seconds
are any of them dual homed? have an IP on both subnets. It's generally pointless, and considered bad network design, to have two IP subnets on the same broadcast domain. Would be much better to split that off into VLANs or otherwise separate the broadcast domain, or just keep it all on the same network.
Apr
30
answered Putting remote Linux server in local VPN
Apr
30
answered VoIP calls dropping
Apr
30
comment pfsense: connection between two internal lans dropped after 20 seconds
so are those not actually separate networks, they're two subnets on the same interface?
Apr
30
answered pfsense: connection between two internal lans dropped after 20 seconds
Mar
24
comment pfSense/strongSwan “deleting half open IKE_SA after timeout” - IPSec connection Android 4.4 to pfSense 2.2.1 fails
That is the root problem. It's only an issue with aggressive mode + PSK. Changing to RSA instead of PSK is the best solution.
Jan
29
awarded  Nice Answer
Jan
16
comment Using Free/Open BSD + pf as a DDoS filter
It's absolutely true. It's 4 years later so things are a little diff today, but still today finding a firewall that'll handle line rate multi-Gb at 64 byte frames is difficult to impossible depending on what options you want to or can afford to consider. It's much more practical to find something that'll do 1 Gb line rate with 64 byte frames today than it was in 2011. Just multiply that 1 Gb a few times to take into account the years, and it's still true today.
Dec
14
answered pfSense: How to add a second WAN subnet for dummies
Sep
24
awarded  Autobiographer
Sep
3
awarded  Yearling
Aug
16
comment How to setup pfSense with multiple public IP's
Policy route is any firewall rule that specifies a gateway.
Aug
7
answered How to setup pfSense with multiple public IP's
Jul
26
comment pfSense failover and OpenVPN site-to-site
The "interface" box determines what IP is bound, that's where you pick the CARP IP. Trust me...I only founded pfSense and literally wrote the book on it.
Jul
26
comment pfsense long ping to google
Better to have a local cache with the DNS forwarder, and its behavior of querying all configured servers simultaneously taking the fastest response, rather than clients waiting for a timeout, moving to another server, rinse and repeat.
Jul
24
comment pfSense dropping gateway interface randomly
Where you can set it as static, that's always preferable. Not because there's any problem inherent in doing DHCP generally speaking, but there are cases with some cable modems for instance in the "modem assigns you a private IP" scenario I mentioned where a static WAN might mask that kind of problem.