The pfSense Store

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - jahonix

Pages: [1] 2 3 4 5 ... 165
1
Hardware / Re: Need to upgrade for gigabit (pppoe) connection
« on: Yesterday at 08:47:30 pm »
The A2SDi-4C-HLN4F is nice but

PPPoE is single threaded
OpenVPN is single threaded
C3000 NICs are currently unsupported in FreeBSD

2
Deutsch / Re: Mit pfsense ts3 server installieren/strato dyndns
« on: Yesterday at 08:30:28 pm »

https://forum.pfsense.org/index.php?topic=124141.msg778526#msg778526
Den letzten Post im Thread habe ich gerade aktualisiert, bei mir funktioniert nur die direkte Verlinkung dazu nicht ...

Solltest du zukünftigen Posts ein paar Satzzeichen spendieren, dann wäre bestimmt niemand beleidigt (und es steigert die Lesbarkeit ungemein)   ;)

3
Deutsch / Re: DynDNS Update Richtung Strato funktioniert nicht
« on: Yesterday at 08:15:01 pm »
Nur der Vollständigkeit halber ein kurzes Update, da sich die Übergabe von User & Password inzwischen geändert haben.
So funktioniert es bei mir aktuell:
Quote
Service Type: custom
Username: wie bei Strato hinterlegt
Password: wie bei Strato hinterlegt
Quote
Update URL: https://dyndns.strato.com/nic/update?hostname=subdomain.paketdomain.tld&myip=%IP%&wildcard=NOCHG&mx=NOCHG&backmx=NOCHG

4
General Questions / Re: Is DMZ supported in pfSense firewall?
« on: January 15, 2018, 05:47:49 pm »
Sure, it all depends on the ruleset you apply to an interface (and your definition of a DMZ).
Where do you see a problem?

https://doc.pfsense.org/index.php/Example_basic_configuration#Example_setup_isolating_LAN_and_DMZ_but_each_with_unrestricted_Internet_access

5
Hardware / Re: Virtualized pfSense on QNAP NAS
« on: January 15, 2018, 05:45:02 pm »

6
webGUI / Re: receiving telegrams over TCP/IP
« on: January 15, 2018, 05:39:30 am »
That's a telnet or ssh session to your gateway.

7
General Questions / Re: Suggestion: Two Improvements to Pfsense
« on: January 15, 2018, 05:31:54 am »
1)  In the GUI where the anti-lock out rule is located.  You should be able to apply that safety feature to more then just the default LAN.   Allow it on all LANs and Bridges.
You only have one LAN, other interfaces are called OPTx for a reason but can be renamed to your liking.
Ruleset to those interfaces varies on usage which means that applying an anti-lockout rule to your firewall on a DMZ interface is ... nonsense at least.
You can copy these rules yourself to other interfaces if needed.

Configuring a bridge is nothing you want to do in a software router regularly. Get rid of that idea quickly!
Each packet has to travel from the incoming interface through the software stack down to the kernel and back up to the outgoing interface again. This is not the equivalent to a switch, never was, never will be.

Having understood that, your 2) is irrelevant.

You may also want to consider setting up the LAN as a bridge by default.
Maybe suggestions like these should only be made if you understand the mechanics behind it...

This will make it an order of magnitude faster to...
...have a borked configuration.

8
General Questions / Re: Is this ethernet port setup possible?
« on: January 14, 2018, 04:47:24 pm »
You surely have an old switch laying around somewhere, don't you? Best bridge ever.

What do you wanna do with the port mirror when you "need everything bridged"?

9
General Questions / Re: Is this ethernet port setup possible?
« on: January 14, 2018, 02:01:08 pm »
That's the port mirroring feature of a managed switch.
Doesn't have a thing to do with pfSense.

10
The way to block guest access to your LAN is by security (rules). Security by obscurity (hiding your hosts) is never a good or even safe way to do it.

11
Routing and Multi WAN / Re: How to setup a second LAN?
« on: January 14, 2018, 01:06:10 am »
Any ideas on what is the proper way for a one network with all the LAN ports on it?
Yes, that's called a switch. Not a router.

I see plenty of guides on VLANs but nothing on basic LANs.
That's what you ment ... well, because your "basic LANs" aka a switch, is nothing you will want to do in software.
There's one exception in the netgate line of pfSense hardware currently and that is the SG-3100. It has 3 interfaces, WAN, LAN and Opt1 with LAN being a managed switch internally.
Otherwise all pfSense devices are routers only.

12
...usually referred to as transit network.
Otherwise you cannot route.

13
Routing and Multi WAN / Re: 2 ISP to 2 WANs and make 2 LANs
« on: January 12, 2018, 03:45:50 pm »
2x 10Mbps will stay 2x 10Mbps. You won't be able to receive a single stream with 20Mbps. With the one exception of an additional service as mentioned above in the YT video.

14
Routing and Multi WAN / Re: 2 ISP to 2 WANs and make 2 LANs
« on: January 12, 2018, 07:17:05 am »
... I don't know how to set up pfsense ... and also how to set this up in my router.
Usually pfSense IS your router. You mean your switch, don't you?

Maybe one option is to share my computer in a Team View session and get some pro help, ...
That could be complicated because you can easily shoot yourself in the foot and have no access to the equipment anymore, especially when configuring a switch and VLANs.

Your switch and APs are: "manages switch (Ubiquiti thoug switch) - 3 AP Ubiquiti"
I have absolutely no experience with Ubiquiti gear so I won't be the one to configure it for.
Maybe someone else here (perhaps post something in the "Bounty" section of this forum) or pfSense Commercial Support?

15
Routing and Multi WAN / Re: How to setup a second LAN?
« on: January 12, 2018, 07:02:59 am »
Yeah, thanks for mentioning it. The ruleset has to be created, of course. But that varies widely with requirements.

Pages: [1] 2 3 4 5 ... 165