Cool- good to see its working for you!

Now I need to go loiok at my setup and see if I have that checked or not…

:)

I JUST figured that out myself (by trial and error) and logged back in here to let everyone know. Thanks for posting this! If I hadn't been desperate enough to try something, you would have saved my life here.

I learned also that to do it easier, you can just type "viconfig", which will load the config, and upon closing it will kill the cached config file, causing PFsense to reload the new config. Means you don't have to reboot.

Far as I know you must have 3. One for each physical nic and one cluster that is "shared".

I have fixed my problem….finally.

I was finally able to add in a route to Firewall A into Firewall B.  This now allows items behind Firewall B to see the servers behind Firewall A.

Solution to my problem is here. http://forum.pfsense.org/index.php?topic=38911.0 However, I am unable to setup the bridge via the GUI. Anyone have the proper steps or can point me to a link that shows the process.

thanks.

meh found the solution

on user dn i had put only the username

the right is to put "cn=rad.adm,cn=users,dc=rad,dc=local"

Ok no 1 sorted. No used to having to put the block rule at the top as used to the cheap stuff.  Just need to sort out the content filter and I am home and dry.

Thanks

Gotcha, thank you!  ;D

No I'm talking about their online client that downloads and runs on your machine every time you go to the site, nothing special.
I was just pointing out that of all the bandwidth testing sites out there speedtest.net is the only one I've found that can test multiple connections.

Steve

You are right sorry for not giving this information.
My hardware setup i already explained but the problems are not coming from it.
After i deleted the Snort interface which i setup things work so below you will find a list of the rules i was using :

snort_attack-responses.rules snort_backdoor.rules snort_bad-traffic.rules snort_bad-traffic.so.rules snort_blacklist.rules snort_botnet-cnc.rules snort_content-replace.rules snort_ddos.rules snort_exploit.rules snort_exploit.so.rules snort_finger.rules snort_ftp.rules snort_icmp-info.rules snort_icmp.rules snort_icmp.so.rules snort_misc.rules snort_misc.so.rules snort_netbios.rules snort_netbios.so.rules snort_other-ids.rules snort_phishing-spam.rules snort_scan.rules snort_specific-threats.rules snort_spyware-put.rules snort_telnet.rules snort_tftp.rules snort_virus.rules snort_web-misc.rules snort_web-misc.so.rules snort_web-php.rules snort_x11.rules

Thanks again for any ideas.

Too bad, thanks a lot for this clear answer.

One solution would probably involve having the VPN endpoints on a distinct IP subnet, using NAT on both VPN endpoints and possibly port forwarding depending on how much of each local network you want to expose to the other end of the VPN (e.g. you want each local network to be able to access just a web server on the other network vs each local network has to be able to access all machines on the other local network).

@stephenw10:

I don't think anything definite has been said. It's all a big mystery!  ;D
However I do seem to recall reading that it may not be open source.

To be honest if you have enough pfSense installs that you need a central monitoring system perhaps you should have a support contract.

Steve

I'm an IT consultant and I'm always trying out new things for my clients and I have at least 5 that I can think of that can use this amazing software and at least two would be able and willing to pay for a support plan. I like to support a project that is living and quite well. I just need to run this software for a while and see how stable it is. So far it does not seem too stable, but I blame that on me making all sorts of changes and trying different situations with my box. I'm only on day 2 and I've had to power cycle the box at random for it becoming non-responsive a few times. :)

Hi,

Thanks for your feedback.

I didn't think to try to connect with ssh. I tried to connect to the VPN but it was not possible.

When the problem occured, nothing special. I looked at Cacti but the trafic was very quiet.

It's very strange because this load was very fast (sorry for my poor English).

No other packages installed.

With help, we figured out the causes and solution to this problem.

Cause :
Me and another admin, tried to access the RRD graph at the exact same time. This locked the interface.
PHPprocess was locked.

Solution :
Kill all locked PHP process.
Restart the webConfigurator.

@joegoz:

it's obvious that all of this is way over my head. Too bad it seemed like a fun project and just turned out to be a waste of an entire weekend.

If given details we might have been able to help you. This is a great project and well worth learning. This is for those who want more than assigning a green interface and a red interface.

@miles267:

67.222.132.199 is a non-cached DNS Server

Hmm, I should read more carefully!  ::)

Steve