similar to: Anyone with a working pfSense firewall configuration?

Hi, I followed the "Optimizing CentOS for gigabit firewall" posting and as some posters wrote pf is soo sooo ssooooo mutch faster, I was thinking to give it a try. But I'm not familier to BSD so I was looking for some tools and found "pfsense" http://www.pfsense.org/ "pfSense is a free, open source customized distribution of FreeBSD tailored for use as a

Hi, On my linksys/sipura phones/ATA, there is a setting called "NAT Mapping Enable" and another called "NAT Keep Alive Enable" These settings must be on in my setup so that my phones/ATA remain connected to my * server. My setup is: Home LAN - Pfsense (NAT, Dynamic Public IP)- Internet - PFsense (1-to-1 NAT, Static public IP) - Asterisk server. I was wondering:

Hi. I've a strange problem with networking and a KVM virtualized pfsense firewall. My hw host is Ubuntu 12.04 fully updated, with two bridges br0 (LAN) and br1 (WAN). pfSense is a KVM guest with the two interfaces in virtio mode. When I run pfSense as fw, the host doesn't seem capable of doing tcp connections outside. I can ping any internal and exernal host, but when I try telnetting

Hi All, I'm trying to find a software package to do the following sip proxy work: I've an A*k server A that needs to be decommissioned, from the USA, and replaced by server B, in the UK. Both servers are on public internet IPs. Whilst the client migration happens, I want to divert all the Register traffic from Server A to Server B to catch any clients still left out there.

I have implemented a small local network. I use pfSense as Firewall and Gateway, I have all my servers inside a DMZ, except the domain controllers that are on the LAN. LAN: 10.10.20.0/24 DMZ: 10.10.30.0/24 DC1: 10.10.20.2 DC2: 10.10.20.3 pfSense: LAN: 10.10.20.1 WAN: x.x.x.x DMZ: 10.10.30.1 In my local network, I have 2 domain controllers with SAMBA4, I would like to find

I only have some experience with OPNsense but maybe you can relate: - In my case it was always the certificate.? - I had to add the cert to the system certs using CLI. Adding them in the WebGUI was not enough. - Port 636 did not work for me, only 389 using STARTTLS Hope that helps... On 16. March 2020 at 08:13:50, Stefan G. Weichinger via samba (samba at lists.samba.org) wrote: Am 15.03.20 um

> Am 15.03.2020 um 08:21 schrieb S?rgio Basto via samba <samba at lists.samba.org>: > > ?On Sat, 2020-03-14 at 07:43 -0700, gabben via samba wrote: >> Your pfSense firewall has OpenVPN built into it already, and you can >> point pfSense authentication back to your samba AD. We support over >> 400 users in this model. The configuration file for OpenVPN is common

Your pfSense firewall has OpenVPN built into it already, and you can point pfSense authentication back to your samba AD. We support over 400 users in this model. The configuration file for OpenVPN is common to all users, and they authenticate with their AD credentials. > On Mar 14, 2020, at 7:21 AM, Michael Howard via samba <samba at lists.samba.org> wrote: > > On 14/03/2020

Hi there, I am trying to setup a configuration that requires me to use SIP and asterisk behind a firewall and over a VPN to a remote office and with some local Phones also. I can't use IAX to my provider because they don't offer it and my handsets ( snom 300 ) also don't support IAX so it's all SIP. The configuration is a follows Asterisk PBX 10.202.17.217/24 ------>|

I've tried IRC in #tinc and #pfsense on freenode for this, not luck yet, figured I'd try the mailing list. A summary of my problem is here: https://www.reddit.com/r/PFSENSE/comments/789xus/tinc_vpn_can_do_everything_but_be_accessed/ If there are any details I can provide that would help I'll be more than happy to. I'm hoping it will be something obvious that someone can say

WOW! OK! The light bulb above my head just came on. I added the script to the Subnet Up Script section, and now all the routes I need have been added in to the table for me. I did have to modify the line a little since I'm using pfSense (FreeBSD). I changed it to... route add "$SUBNET" -iface "$INTERFACE" ...I also used... route del "$SUBNET" -iface

Hi Rowland, I don't want to to run an AD DC on firewall device, barely DHCP and maybe DNS. What you have pointed me to is similar to what I have in place: https://blog.michael.kuron-germany.de/2011/02/isc-dhcpd-dynamic-dns-updates-against-secure-microsoft-dns/ and which is working fine. NOW I want to switch DHCP from isc-dhcp-server 4.2.2 on Debian to DHCP on pfSense firewall (based on

Hi Everyone, Just trying to connect the Zoiper Communicator to connect to Asterisk which is behind Pfsense. Here is what I get at debug and it doesn't register. Error code 16. Can someone please let me know their firewall, NAT, outbound 1-to-1 pfsense settings as it seems to me I am doing something wrong on the firewall? *Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 000 Type: IAX

That's helpful. About half of our DHCP clients are Unixes. Maybe I'll find a way to make pfSense perform a Kerberos handshake with Samba for the sake of updating DNS. If not, I'll just install isc-dhcp-server on the Debian container running Samba AD. On 20/06/19 13:25, Rowland penny via samba wrote: > The problem is that Windows machines can update their own records in > AD,

Hi all, Has anybody got it working? My struggle is briefly described here but the pfSense community is dead silent: https://forum.netgate.com/topic/138881/dhcp-dyndns-intergration-with-samba-dns Regards, Adam

Dear Friends Greetings, i have a question for you, i am sure someone can help. The pfsense captive portal is up and running. Time countdown vouchers are working without issue, such as 30m, 45m, 1h & so on. However, I'd like to set up a download quota of 200MB per voucher. but then you need to login with a username and password, instead of vouchers. but I haven't found a way to

Probably not the best place to ask, but hopefully someone can point me in the right direction. I have a tiny business. We use Samba for file sharing and authentication in an AD setup. I'm running a pfsense appliance firewall. NAT on the internal network. Is there a way to allow employees to authenticate and access files to encourage remote work? What resource should I look to to figure

Hello VoIP guys Sorry for being somewhat off-topic. At the moment I am studying informatics in the seventh semester and I need to start thinking about my thesis. As I am very interested in VoIP technologies I thought about picking this as my main topic. So far I have only little experience in this area. I have been fiddling around with siproxd and pfSense and have red the one or the other packet

I was using pfSense in a vm under esx but I want to move to Xen and prefer something that can run as a pv guest. Anyone got any reco's of what can run on top of CentOS to perform a similar role as pfSense (perform nat/pat and firewall etc between two interfaces)? Thanks for any ideas! jlc

Am 10.07.19 um 20:38 schrieb miguel medalha via samba: > >> How could I achieve that when my client from the LAN makes a request >> to xmpp.domain.tld, SAMBA4 direct that request to pfSense and respond >> with the IP assigned to it? > > In the smb.conf file of your DCs you insert the line: > > dns forwarder = [IP address of your pfSense machine] there is no