Incoming load balance on virtual IP's and 1 real ip

[Nifa]

Hi there.
At first: I'm totally new to unix and firewalling so be patient ;)

I have to setup a little network and I want to use pfsense (1.0.1). But there are some problems for me:
1 WAN-Interface, 5 IP's on that interface (I'll have to do it this way, no questions about pls :) )
4 Servers in LAN, 2 webservers with failover-function 1 mysql and 1 mail

I'm sitting here and understand not enough to set it up, so any help will be welcome..

How do I setup the virtual ip's on the wan interface?
Am I right with:
Create vlan's for each ip
Setup virtual ip's and store the values into the created interfaces? (opt1, opt2 and so on)

For Load balancing I took the documentation on the faq, but nothing seems to work.

Created pools and NAT entries for the servers, no advanced outbound, so that the outgoing rules are automatically being created
I created a simple rule in the firewall, which says: From any to any -> pass, which will open the box to the whole world (only for testing purposes, the complete system is in a seperate network ;))

But I can't ping any server nor ssh' anyone…
What have I done wrong?

[Perry]

At first: I'm totally new to unix and firewalling so be patient Wink

Welcome ;) So your reading books and searching the net for basic facts on terms…....  ::)

I have to setup a little network and I want to use pfsense (1.0.1). But there are some problems for me:

your should upgrade. http://pfsense.blogspot.com/2007/05/choosing-which-version-to-run.html

1 WAN-Interface, 5 IP's on that interface (I'll have to do it this way, no questions about pls Smiley )
4 Servers in LAN, 2 webservers with failover-function 1 mysql and 1 mail

I'm sitting here and understand not enough to set it up, so any help will be welcome..

How do I setup the virtual ip's on the wan interface?
Am I right with:
Create vlan's for each ip
Setup virtual ip's and store the values into the created interfaces? (opt1, opt2 and so on)

To clear this up a bit
You only got 1 lan nic?
You have a vlan switch?
Under virtual ip your add your 4 extra ip's to the wan interface
after that you nat them ( don't need vlans for that )
http://doc.m0n0.ch/handbook-single/#id2600401

For Load balancing I took the documentation on the faq, but nothing seems to work.

You want incoming load balancing for your webservers? http://wiki.pfsense.com/wikka.php?wakka=IncomingLoadBalancing

have fun and do it in small steps imo

[Nifa]

@Perry:

Welcome ;) So your reading books and searching the net for basic facts on terms…....  ::)

Thanx ;)

@Perry:

To clear this up a bit
You only got 1 lan nic?

No, of course not :)
I have 2 LAN-Nic's, otherwise load balancing should be hmm, let's say useless? ;)

@Perry:

You have a vlan switch?
Under virtual ip your add your 4 extra ip's to the wan interface
after that you nat them ( don't need vlans for that )
http://doc.m0n0.ch/handbook-single/#id2600401

You want incoming load balancing for your webservers? http://wiki.pfsense.com/wikka.php?wakka=IncomingLoadBalancing

have fun and do it in small steps imo

Thx for hint to m0n0wall, doesn't have look on it  ::)

Ok, I'll give it a try and never forget….
I'll be back  ;D

[Nifa]

Thx a lot once again Perry, you made my day  ;D

The real difficult thing was to add the firewall rule for the whole pool :)