similar to: Q: Samba AD, Pfsense, Windows 10, vpn

> Am 15.03.2020 um 08:21 schrieb S?rgio Basto via samba <samba at lists.samba.org>: > > ?On Sat, 2020-03-14 at 07:43 -0700, gabben via samba wrote: >> Your pfSense firewall has OpenVPN built into it already, and you can >> point pfSense authentication back to your samba AD. We support over >> 400 users in this model. The configuration file for OpenVPN is common

Am 16.03.20 um 09:02 schrieb Alexander Harm via samba: > > I only have some experience with OPNsense but maybe you can relate: > > - In my case it was always the certificate.? > - I had to add the cert to the system certs using CLI. Adding them in the WebGUI was not enough. > - Port 636 did not work for me, only 389 using STARTTLS > > Hope that helps... Ah, yes, thanks.

Am 15.03.20 um 10:46 schrieb Christian Naumer via samba: > > >> Am 15.03.2020 um 08:21 schrieb S?rgio Basto via samba <samba at lists.samba.org>: >> >> ?On Sat, 2020-03-14 at 07:43 -0700, gabben via samba wrote: >>> Your pfSense firewall has OpenVPN built into it already, and you can >>> point pfSense authentication back to your samba AD. We

Your pfSense firewall has OpenVPN built into it already, and you can point pfSense authentication back to your samba AD. We support over 400 users in this model. The configuration file for OpenVPN is common to all users, and they authenticate with their AD credentials. > On Mar 14, 2020, at 7:21 AM, Michael Howard via samba <samba at lists.samba.org> wrote: > > On 14/03/2020

Hi List, I am looking for 1U firewall hardware, any ideas? Something like that (http://www.applianceshop.eu/index.php/firewalls/opnsense/opnsense-pfsense-ghz-19-appliance-1.html) but at least with 5GBit nics and more memory. -- Eero

Probably not the best place to ask, but hopefully someone can point me in the right direction. I have a tiny business. We use Samba for file sharing and authentication in an AD setup. I'm running a pfsense appliance firewall. NAT on the internal network. Is there a way to allow employees to authenticate and access files to encourage remote work? What resource should I look to to figure

On 14/03/2020 13:53, Marco Shmerykowsky via samba wrote: > > Probably not the best place to ask, but hopefully > someone can point me in the right direction. > > I have a tiny business.? We use Samba for file sharing > and authentication in an AD setup.? I'm running a > pfsense appliance firewall.? NAT on the internal > network. > > Is there a way to allow

WOW! OK! The light bulb above my head just came on. I added the script to the Subnet Up Script section, and now all the routes I need have been added in to the table for me. I did have to modify the line a little since I'm using pfSense (FreeBSD). I changed it to... route add "$SUBNET" -iface "$INTERFACE" ...I also used... route del "$SUBNET" -iface

I have implemented a small local network. I use pfSense as Firewall and Gateway, I have all my servers inside a DMZ, except the domain controllers that are on the LAN. LAN: 10.10.20.0/24 DMZ: 10.10.30.0/24 DC1: 10.10.20.2 DC2: 10.10.20.3 pfSense: LAN: 10.10.20.1 WAN: x.x.x.x DMZ: 10.10.30.1 In my local network, I have 2 domain controllers with SAMBA4, I would like to find

Hi, I followed the "Optimizing CentOS for gigabit firewall" posting and as some posters wrote pf is soo sooo ssooooo mutch faster, I was thinking to give it a try. But I'm not familier to BSD so I was looking for some tools and found "pfsense" http://www.pfsense.org/ "pfSense is a free, open source customized distribution of FreeBSD tailored for use as a

Hi. I've a strange problem with networking and a KVM virtualized pfsense firewall. My hw host is Ubuntu 12.04 fully updated, with two bridges br0 (LAN) and br1 (WAN). pfSense is a KVM guest with the two interfaces in virtio mode. When I run pfSense as fw, the host doesn't seem capable of doing tcp connections outside. I can ping any internal and exernal host, but when I try telnetting

Other SIP clients behind the firewall (not using STUN, work). We have a SIP client using STUN and ICE behind a pfSense firewall. The firewall is behaving oddly. REGISTER packets work fine. But when the client tries to make a call, the first INVITE packet from the client pass through the firewall and makes it to the Asterisk server. The Asterisk server sends back a 401 client sends ACK,

I've tried IRC in #tinc and #pfsense on freenode for this, not luck yet, figured I'd try the mailing list. A summary of my problem is here: https://www.reddit.com/r/PFSENSE/comments/789xus/tinc_vpn_can_do_everything_but_be_accessed/ If there are any details I can provide that would help I'll be more than happy to. I'm hoping it will be something obvious that someone can say

Hi Rowland, I don't want to to run an AD DC on firewall device, barely DHCP and maybe DNS. What you have pointed me to is similar to what I have in place: https://blog.michael.kuron-germany.de/2011/02/isc-dhcpd-dynamic-dns-updates-against-secure-microsoft-dns/ and which is working fine. NOW I want to switch DHCP from isc-dhcp-server 4.2.2 on Debian to DHCP on pfSense firewall (based on

That's helpful. About half of our DHCP clients are Unixes. Maybe I'll find a way to make pfSense perform a Kerberos handshake with Samba for the sake of updating DNS. If not, I'll just install isc-dhcp-server on the Debian container running Samba AD. On 20/06/19 13:25, Rowland penny via samba wrote: > The problem is that Windows machines can update their own records in > AD,

Hi all, Has anybody got it working? My struggle is briefly described here but the pfSense community is dead silent: https://forum.netgate.com/topic/138881/dhcp-dyndns-intergration-with-samba-dns Regards, Adam

Dear Friends Greetings, i have a question for you, i am sure someone can help. The pfsense captive portal is up and running. Time countdown vouchers are working without issue, such as 30m, 45m, 1h & so on. However, I'd like to set up a download quota of 200MB per voucher. but then you need to login with a username and password, instead of vouchers. but I haven't found a way to

Am 10.07.19 um 20:38 schrieb miguel medalha via samba: > >> How could I achieve that when my client from the LAN makes a request >> to xmpp.domain.tld, SAMBA4 direct that request to pfSense and respond >> with the IP assigned to it? > > In the smb.conf file of your DCs you insert the line: > > dns forwarder = [IP address of your pfSense machine] there is no

I've been trying to setup OPENVPN on a Netgate appliance running pfsense. Initially, the authentication server I created appears to function. A connection is made, the "bind" is completed and the organizational units are fetched from the server and returned. A few minutes later - without making any changes - the same test returns the following errors: php-fpm 67757

Hi all I need to control an UPS TSSahara usign NUT in pfsense and it is not working. Can somenone help ? ups.conf user=root [tsshara] driver = megatec_usb port = auto vendorid = 0483 productid = 0035 desc = "No Break TS-Shara" [myups] driver=usbhid-ups port=auto /usr/local/libexec/nut/megatec_usb -u root -a tsshara -DD Network UPS Tools 2.2.2 - Megatec protocol driver 1.5.14